Test ID:	1.3.6.1.4.1.25623.1.0.53328
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-252)
Summary:	The remote host is missing an update for the Debian 'slocate' package(s) announced via the DSA-252 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'slocate' package(s) announced via the DSA-252 advisory. Vulnerability Insight: A problem has been discovered in slocate, a secure locate replacement. A buffer overflow in the setgid program slocate can be used to execute arbitrary code as group slocate. This can be used to alter the slocate database. For the stable distribution (woody) this problem has been fixed in version 2.6-1.3.1. The old stable distribution (potato) is not affected by this problem. For the unstable distribution (sid) this problem has been fixed in version 2.7-1. We recommend that you upgrade your slocate package immediately. Affected Software/OS: 'slocate' package(s) on Debian 3.0. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0056 Bugtraq: 20030124 [USG- SA- 2003.001] USG Security Advisory (slocate) (Google Search) http://marc.info/?l=bugtraq&m=104342864418213&w=2 Bugtraq: 20030125 Re: [USG- SA- 2003.001] USG Security Advisory (slocate) (Google Search) http://marc.info/?l=bugtraq&m=104348607205691&w=2 Bugtraq: 20030202 GLSA: slocate (Google Search) http://marc.info/?l=bugtraq&m=104428624705363&w=2 Caldera Security Advisory: CSSA-2003-009.0 ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-009.0.txt Conectiva Linux advisory: CLA-2003:643 http://www.net-security.org/advisory.php?id=2010 Debian Security Information: DSA-252 (Google Search) http://www.debian.org/security/2003/dsa-252 http://www.mandriva.com/security/advisories?name=MDKSA-2003:015 http://www.usg.org.uk/advisories/2003.001.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11369 RedHat Security Advisories: RHSA-2004:041 http://rhn.redhat.com/errata/RHSA-2004-041.html http://secunia.com/advisories/10720 http://secunia.com/advisories/7947 http://secunia.com/advisories/7982 http://secunia.com/advisories/8007 http://secunia.com/advisories/8118/ http://secunia.com/advisories/8236 http://secunia.com/advisories/8749 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.