Test ID:	1.3.6.1.4.1.25623.1.0.56847
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2006:0541
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2006:0541. The Dia drawing program is designed to draw various types of diagrams. Several format string flaws were found in the way dia displays certain messages. If an attacker is able to trick a Dia user into opening a carefully crafted file, it may be possible to execute arbitrary code as the user running Dia. (CVE-2006-2453, CVE-2006-2480) Users of Dia should update to these erratum packages, which contain backported patches and are not vulnerable to these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2006-0541.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2453 1016203 http://securitytracker.com/id?1016203 18166 http://www.securityfocus.com/bid/18166 20254 http://secunia.com/advisories/20254 20339 http://secunia.com/advisories/20339 20422 http://secunia.com/advisories/20422 20457 http://secunia.com/advisories/20457 20513 http://secunia.com/advisories/20513 FEDORA-2006-580 http://www.redhat.com/archives/fedora-package-announce/2006-May/msg00119.html GLSA-200606-03 http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml MDKSA-2006:093 http://www.mandriva.com/security/advisories?name=MDKSA-2006:093 RHSA-2006:0541 http://www.redhat.com/support/errata/RHSA-2006-0541.html SUSE-SR:2006:012 http://www.novell.com/linux/security/advisories/2006-06-02.html USN-286-1 https://usn.ubuntu.com/286-1/ http://www.redhat.com/archives/fedora-security-list/2006-May/msg00099.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192830 oval:org.mitre.oval:def:11600 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11600 Common Vulnerability Exposure (CVE) ID: CVE-2006-2480 BugTraq ID: 18078 http://www.securityfocus.com/bid/18078 http://kandangjamur.net/tutorial/dia.txt http://www.osvdb.org/25699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11224 http://secunia.com/advisories/20199 SuSE Security Announcement: SUSE-SR:2006:012 (Google Search) http://www.securityfocus.com/archive/82/433313/30/0/threaded http://www.vupen.com/english/advisories/2006/1908
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.