Test ID:	1.3.6.1.4.1.25623.1.0.56832
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1078-1)
Summary:	The remote host is missing an update for the Debian 'tiff' package(s) announced via the DSA-1078-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'tiff' package(s) announced via the DSA-1078-1 advisory. Vulnerability Insight: Andrey Kiselev discovered a problem in the TIFF library that may allow an attacker with a specially crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values to crash the library and hence the surrounding application. The old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 3.7.2-4. The unstable distribution (sid) is not affected by this problem. We recommend that you upgrade your tiff packages and restart the programs using it. Affected Software/OS: 'tiff' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2120 17809 http://www.securityfocus.com/bid/17809 19936 http://secunia.com/advisories/19936 19949 http://secunia.com/advisories/19949 19964 http://secunia.com/advisories/19964 20023 http://secunia.com/advisories/20023 2006-0024 http://www.trustix.org/errata/2006/0024 20060501-01-U ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc 20210 http://secunia.com/advisories/20210 20330 http://secunia.com/advisories/20330 20667 http://secunia.com/advisories/20667 DSA-1078 http://www.debian.org/security/2006/dsa-1078 MDKSA-2006:082 http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 RHSA-2006:0425 http://www.redhat.com/support/errata/RHSA-2006-0425.html USN-277-1 https://usn.ubuntu.com/277-1/ http://bugzilla.remotesensing.org/show_bug.cgi?id=1065 http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189974 oval:org.mitre.oval:def:9572 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.