Nessus Plugin #15146

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA309] DSA-309-1 eterm

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-309-1 eterm

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0382

Bugtraq_id:

7708

Xrefs:

DSA:309

Description:

"bazarr" discovered that eterm is vulnerable to a buffer overflow of
the ETERMPATH environment variable. This bug can be exploited to gain
the privileges of the group "utmp" on a system where eterm is
installed.
For the stable distribution (woody), this problem has been fixed in
version 0.9.2-0pre2002042903.1.
The old stable distribution (potato) is not affected by this bug.
For the unstable distribution (sid) this problem will be fixed soon.
We recommend that you update your eterm package.


Solution : http://www.debian.org/security/2003/dsa-309
Risk factor : High