Test ID:	1.3.6.1.4.1.25623.1.0.50507
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2003:078 (mpg123)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mpg123 announced via advisory MDKSA-2003:078. A vulnerability in the mpg123 mp3 player could allow local and/or remote attackers to cause a DoS and possibly execute arbitrary code via an mp3 file with a zero bitrate, which causes a negative frame size. Affected versions: 9.0, 9.1, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2003:078 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0577 http://online.securityfocus.com/bid/6629 Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 6629 Common Vulnerability Exposure (CVE) ID: CVE-2003-0577 http://www.securityfocus.com/bid/6629 Bugtraq: 20030116 Re[2]: Local/remote mpg123 exploit (Google Search) http://www.securityfocus.com/archive/1/306903 Conectiva Linux advisory: CLA-2003:695 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695 http://www.mandriva.com/security/advisories?name=MDKSA-2003:078 SCO Security Bulletin: CSSA-2004-002.0 ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt http://secunia.com/advisories/7875
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.