Test ID:	1.3.6.1.4.1.25623.1.0.52211
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: yamt
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: yamt CVE-2004-1302 The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag. Solution: Update your system with the appropriate patches or software upgrades. http://tigger.uic.edu/~ jlongs2/holes/yamt.txt http://www.vuxml.org/freebsd/d4a7054a-6d96-11d9-a9e7-0001020eed82.html CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	BugTraq ID: 11999 Common Vulnerability Exposure (CVE) ID: CVE-2004-1302 http://www.securityfocus.com/bid/11999 http://tigger.uic.edu/~jlongs2/holes/yamt.txt http://securitytracker.com/id?1012583 http://secunia.com/advisories/13554 XForce ISS Database: yamt-id3tagsort-bo(18614) https://exchange.xforce.ibmcloud.com/vulnerabilities/18614
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.