Gentoo Local Security Checks : Gentoo Security Advisory GLSA 200404-12 (scorched3d)

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.54551

Category: Gentoo Local Security Checks

Title: Gentoo Security Advisory GLSA 200404-12 (scorched3d)

Summary: The remote host is missing updates announced in;advisory GLSA 200404-12.

Description: Summary:
The remote host is missing updates announced in
advisory GLSA 200404-12.

Vulnerability Insight:
Scorched 3D is vulnerable to a format string attack in the chat box that
leads to Denial of Service on the game server and possibly allows
execution of arbitrary code.

Solution:
Scorched 3D users should upgrade to version 37 or later:

# emerge sync

# emerge -pv '>=games-strategy/scorched3d-37'
# emerge '>=games-strategy/scorched3d-37'

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Copyright Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.54551
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200404-12 (scorched3d)
Summary:	The remote host is missing updates announced in;advisory GLSA 200404-12.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200404-12. Vulnerability Insight: Scorched 3D is vulnerable to a format string attack in the chat box that leads to Denial of Service on the game server and possibly allows execution of arbitrary code. Solution: Scorched 3D users should upgrade to version 37 or later: # emerge sync # emerge -pv '>=games-strategy/scorched3d-37' # emerge '>=games-strategy/scorched3d-37' CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Copyright	Copyright (C) 2008 E-Soft Inc.