Test ID:	1.3.6.1.4.1.25623.1.0.71570
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201207-08 (Gnash)
Summary:	The remote host is missing updates announced in;advisory GLSA 201207-08.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 201207-08. Vulnerability Insight: Multiple vulnerabilities have been found in Gnash which could result in execution of arbitrary code, Denial of Service, or information disclosure. Solution: All Gnash users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-plugins/gnash-0.8.10-r2' CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4328 48325 http://secunia.com/advisories/48325 48466 http://secunia.com/advisories/48466 50747 http://www.securityfocus.com/bid/50747 77243 http://www.osvdb.org/77243 DSA-2435 http://www.debian.org/security/2012/dsa-2435 [oss-security] 20111121 CVE Request (minor) -- gnash -- Unsafe management of HTTP cookies http://www.openwall.com/lists/oss-security/2011/11/21/7 [oss-security] 20111121 Re: CVE Request (minor) -- gnash -- Unsafe management of HTTP cookies http://www.openwall.com/lists/oss-security/2011/11/21/12 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384 http://git.savannah.gnu.org/gitweb/?p=gnash.git%3Ba=commitdiff%3Bh=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55 https://bugzilla.redhat.com/show_bug.cgi?id=755518 openSUSE-SU-2012:0330 http://lists.opensuse.org/opensuse-updates/2012-03/msg00003.html openSUSE-SU-2012:0369 http://lists.opensuse.org/opensuse-updates/2012-03/msg00026.html Common Vulnerability Exposure (CVE) ID: CVE-2012-1175 47183 http://secunia.com/advisories/47183 52446 http://www.securityfocus.com/bid/52446 [oss-security] 20120314 CVE request: gnash integer overflow http://www.openwall.com/lists/oss-security/2012/03/14/5 [oss-security] 20120314 Re: CVE request: gnash integer overflow http://www.openwall.com/lists/oss-security/2012/03/14/6 http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527 https://bugzilla.redhat.com/show_bug.cgi?id=803443
Copyright	Copyright (C) 2012 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.