Test ID:	1.3.6.1.4.1.25623.1.0.58640
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1380-1)
Summary:	The remote host is missing an update for the Debian 'elinks' package(s) announced via the DSA-1380-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'elinks' package(s) announced via the DSA-1380-1 advisory. Vulnerability Insight: Kalle Olavi Niemitalo discovered that elinks, an advanced text-mode WWW browser, sent HTTP POST data in cleartext when using an HTTPS proxy server potentially allowing private information to be disclosed. For the stable distribution (etch), this problem has been fixed in version 0.11.1-1.2etch1. For the unstable distribution (sid), this problem has been fixed in version 0.11.1-1.5. We recommend that you upgrade your elinks package. Affected Software/OS: 'elinks' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5034 BugTraq ID: 25799 http://www.securityfocus.com/bid/25799 Bugtraq: 20071005 rPSA-2007-0209-1 elinks (Google Search) http://www.securityfocus.com/archive/1/481606/100/0/threaded Debian Security Information: DSA-1380 (Google Search) http://www.debian.org/security/2007/dsa-1380 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00335.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00079.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10335 http://www.redhat.com/support/errata/RHSA-2007-0933.html http://www.securitytracker.com/id?1018764 http://secunia.com/advisories/26936 http://secunia.com/advisories/26949 http://secunia.com/advisories/26956 http://secunia.com/advisories/27038 http://secunia.com/advisories/27062 http://secunia.com/advisories/27125 http://secunia.com/advisories/27132 http://www.ubuntu.com/usn/usn-519-1 http://www.vupen.com/english/advisories/2007/3278
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.