Nessus Plugin #15116

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA279] DSA-279-1 metrics

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-279-1 metrics

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0202

Bugtraq_id:

7293

Xrefs:

DSA:279

Description:

Paul Szabo and Matt Zimmerman discovered two similar problems in
metrics, a tools for software metrics. Two scripts in this package,
"halstead" and "gather_stats", open temporary files without taking
appropriate security precautions. "halstead" is installed as a user
program, while "gather_stats" is only used in an auxiliary script
included in the source code. These vulnerabilities could allow a
local attacker to overwrite files owned by the user running the
scripts, including root.
The stable distribution (woody) is not affected since it doesn't
contain a metrics package anymore.
For the old stable distribution (potato) this problem has been fixed
in version 1.0-1.1.
The unstable distribution (sid) is not affected since it doesn't
contain a metrics package anymore.
We recommend that you upgrade your metrics package.


Solution : http://www.debian.org/security/2003/dsa-279
Risk factor : High