Test ID:	1.3.6.1.4.1.25623.1.0.54554
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200404-15 (xchat)
Summary:	The remote host is missing updates announced in;advisory GLSA 200404-15.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200404-15. Vulnerability Insight: XChat is vulnerable to a stack overflow that may allow a remote attacker to run arbitrary code. Solution: All XChat users should upgrade to the latest stable version: # emerge sync # emerge -pv '>=net-irc/xchat-2.0.8-r1' # emerge '>=net-irc/xchat-2.0.8-r1' Note that users of the gtk1 version of xchat (1.8.*) should upgrade to xchat-1.8.11-r1: # emerge sync # emerge -pv '=net-irc/xchat-1.8.11-r1' # emerge '=net-irc/xchat-1.8.11-r1' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0409 Debian Security Information: DSA-493 (Google Search) https://www.debian.org/security/2004/dsa-493 http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013 http://security.gentoo.org/glsa/glsa-200404-15.xml http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312 http://www.redhat.com/support/errata/RHSA-2004-177.html http://www.redhat.com/support/errata/RHSA-2004-585.html
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.