Test ID:	1.3.6.1.4.1.25623.1.1.4.2012.0329.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2012:0329-1)
Summary:	The remote host is missing an update for the 'ark' package(s) announced via the SUSE-SU-2012:0329-1 advisory.
Description:	Summary: The remote host is missing an update for the 'ark' package(s) announced via the SUSE-SU-2012:0329-1 advisory. Vulnerability Insight: Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed (CVE-2011-2725). Security Issue reference: * CVE-2011-2725 > Affected Software/OS: 'ark' package(s) on SUSE Linux Enterprise Desktop 11-SP1, SUSE Linux Enterprise Server 11-SP1. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2725 20111007 Medium severity flaw with Ark http://seclists.org/fulldisclosure/2011/Oct/351 USN-1276-1 http://www.ubuntu.com/usn/USN-1276-1 http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Traversal.html https://bugzilla.novell.com/show_bug.cgi?id=708268 https://bugzilla.redhat.com/show_bug.cgi?id=725764 openSUSE-SU-2012:0322 http://lists.opensuse.org/opensuse-updates/2012-03/msg00002.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.