Test ID:	1.3.6.1.4.1.25623.1.0.66305
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-855-1 (libhtml-parser-perl)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to libhtml-parser-perl announced via advisory USN-855-1. Details follow: Mark Martinec discovered that HTML::Parser incorrectly handled strings with incomplete entities. An attacker could send specially crafted input to applications that use HTML::Parser and cause a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libhtml-parser-perl 3.48-1ubuntu0.1 Ubuntu 8.04 LTS: libhtml-parser-perl 3.56-1ubuntu0.1 Ubuntu 8.10: libhtml-parser-perl 3.56-1ubuntu2.1 Ubuntu 9.04: libhtml-parser-perl 3.59-1ubuntu1.1 Ubuntu 9.10: libhtml-parser-perl 3.61-1ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. https://secure1.securityspace.com/smysecure/catid.html?in=USN-855-1 CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3627 BugTraq ID: 36807 http://www.securityfocus.com/bid/36807 http://www.openwall.com/lists/oss-security/2009/10/23/9 http://secunia.com/advisories/37155 http://www.vupen.com/english/advisories/2009/3022 XForce ISS Database: htmlparser-decodeentities-dos(53941) https://exchange.xforce.ibmcloud.com/vulnerabilities/53941
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.