Test ID:	1.3.6.1.4.1.25623.1.0.69113
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2178-1)
Summary:	The remote host is missing an update for the Debian 'pango1.0' package(s) announced via the DSA-2178-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'pango1.0' package(s) announced via the DSA-2178-1 advisory. Vulnerability Insight: It was discovered that Pango did not check for memory allocation failures, causing a NULL pointer dereference with an adjustable offset. This can lead to application crashes and potentially arbitrary code execution. The oldstable distribution (lenny) is not affected by this problem. For the stable distribution (squeeze), this problem has been fixed in version 1.28.3-1+squeeze2. For the testing distribution (wheezy) and the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your pango1.0 packages. Affected Software/OS: 'pango1.0' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0064 BugTraq ID: 46632 http://www.securityfocus.com/bid/46632 Debian Security Information: DSA-2178 (Google Search) http://www.debian.org/security/2011/dsa-2178 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:040 http://www.redhat.com/support/errata/RHSA-2011-0309.html http://securitytracker.com/id?1025145 http://secunia.com/advisories/43559 http://secunia.com/advisories/43572 http://secunia.com/advisories/43578 http://secunia.com/advisories/43800 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.ubuntu.com/usn/USN-1082-1 http://www.vupen.com/english/advisories/2011/0543 http://www.vupen.com/english/advisories/2011/0555 http://www.vupen.com/english/advisories/2011/0558 http://www.vupen.com/english/advisories/2011/0584 http://www.vupen.com/english/advisories/2011/0683 XForce ISS Database: pango-hbbufferensure-bo(65770) https://exchange.xforce.ibmcloud.com/vulnerabilities/65770
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.