|
Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2004:130: speedtouch Vulnerability Scan
Vulnerability Scan Summary Check for the version of the speedtouch package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2004:130 (speedtouch).
The Speedtouch USB driver contains a number of format string vulnerabilities
due to improperly made syslog() system calls. These vulnerabilities can be
abused by a local user to potentially allow the execution of arbitray code with
elevated rights.
The updated packages have been patched to prevent this problem.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2004:130
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|