Nessus Plugin #15364

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA527] DSA-527-1 pavuk

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-527-1 pavuk

Version:

$Revision: 1.4 $

Cve_id:

CAN-2004-0456

Bugtraq_id:

10633

Xrefs:

DSA:527

Description:

Ulf HΣrnhammar discovered a vulnerability in pavuk, a file retrieval
program, whereby an oversized HTTP 305 response sent by a malicious
server could cause arbitrary code to be executed with the privileges
of the pavuk process.
For the current stable distribution (woody), this problem has been
fixed in version 0.9pl28-1woody1.
pavuk is no longer included in the unstable distribution of Debian.
We recommend that you update your pavuk package.


Solution : http://www.debian.org/security/2004/dsa-527
Risk factor : High