Test ID:	1.3.6.1.4.1.25623.1.0.54781
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200412-22 (mpg123)
Summary:	The remote host is missing updates announced in;advisory GLSA 200412-22.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200412-22. Vulnerability Insight: mpg123 is vulnerable to a buffer overflow that allows an attacker to execute arbitrary code through the use of a malicious playlist. Solution: All mpg123 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-sound/mpg123-0.59s-r8' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1284 http://tigger.uic.edu/~jlongs2/holes/mpg123.txt SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html XForce ISS Database: mpg123-findnextfile-bo(18626) https://exchange.xforce.ibmcloud.com/vulnerabilities/18626
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.