Test ID:	1.3.6.1.4.1.25623.1.0.53305
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 226-1 (xpdf-i)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to xpdf-i announced via advisory DSA 226-1. iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf and xpdf-i packages that can be exploited to gain the privileges of the target user. This can lead to gaining privileged access to the 'lp' user if thee pdftops program is part of the print filter. For the current stable distribution (woody) xpdf-i is only a dummy package and the problem was fixed in xpdf already. For the old stable distribution (potato) this problem has been fixed in version 0.90-8.1. For the unstable distribution (sid) this problem has been fixed in version 2.01-2. We recommend that you upgrade your xpdf-i package. Solution: https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20226-1 CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	BugTraq ID: 6475 Common Vulnerability Exposure (CVE) ID: CVE-2002-1384 http://www.securityfocus.com/bid/6475 Debian Security Information: DSA-222 (Google Search) http://www.debian.org/security/2003/dsa-222 Debian Security Information: DSA-226 (Google Search) http://www.debian.org/security/2003/dsa-226 Debian Security Information: DSA-232 (Google Search) http://www.debian.org/security/2003/dsa-232 http://marc.info/?l=bugtraq&m=104152282309980&w=2 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:002 http://www.idefense.com/advisory/12.23.02.txt http://www.redhat.com/support/errata/RHSA-2002-295.html http://www.redhat.com/support/errata/RHSA-2002-307.html http://www.redhat.com/support/errata/RHSA-2003-037.html http://www.redhat.com/support/errata/RHSA-2003-216.html SuSE Security Announcement: SUSE-SA:2003:002 (Google Search) http://www.novell.com/linux/security/advisories/2003_002_cups.html XForce ISS Database: pdftops-integer-overflow(10937) https://exchange.xforce.ibmcloud.com/vulnerabilities/10937
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.