Test ID:	1.3.6.1.4.1.25623.1.0.66333
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200911-03 (c-client uw-imap)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory GLSA 200911-03. Multiple vulnerabilities have been found in the UW IMAP toolkit and the c-client library, the worst of which leading to the execution of arbitrary code. Solution: All c-client library users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-libs/c-client-2007e' All UW IMAP toolkit users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-mail/uw-imap-2007e' https://secure1.securityspace.com/smysecure/catid.html?in=GLSA%20200911-03 http://bugs.gentoo.org/show_bug.cgi?id=245425 http://bugs.gentoo.org/show_bug.cgi?id=252567 CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5005 BugTraq ID: 32072 http://www.securityfocus.com/bid/32072 Bugtraq: 20081103 Bitsec Security Advisory: UW/Panda IMAP [dt]mail buffer overflow (Google Search) http://www.securityfocus.com/archive/1/498002/100/0/threaded Debian Security Information: DSA-1685 (Google Search) http://www.debian.org/security/2008/dsa-1685 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00058.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00082.html http://marc.info/?l=full-disclosure&m=122572590212610&w=4 http://www.mandriva.com/security/advisories?name=MDVSA-2009:146 http://www.bitsec.com/en/rad/bsa-081103.c http://www.bitsec.com/en/rad/bsa-081103.txt http://www.washington.edu/alpine/tmailbug.html http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267.html http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002268.html http://www.openwall.com/lists/oss-security/2008/11/03/3 http://www.openwall.com/lists/oss-security/2008/11/03/4 http://www.openwall.com/lists/oss-security/2008/11/03/5 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10485 RedHat Security Advisories: RHSA-2009:0275 http://rhn.redhat.com/errata/RHSA-2009-0275.html http://securitytracker.com/id?1021131 http://secunia.com/advisories/32483 http://secunia.com/advisories/32512 http://secunia.com/advisories/33142 http://secunia.com/advisories/33996 http://securityreason.com/securityalert/4570 http://www.vupen.com/english/advisories/2008/3042 XForce ISS Database: uwimapd-tmail-bo(46281) https://exchange.xforce.ibmcloud.com/vulnerabilities/46281 Common Vulnerability Exposure (CVE) ID: CVE-2008-5006 BugTraq ID: 32280 http://www.securityfocus.com/bid/32280 XForce ISS Database: imap-toolkit-smtp-dos(46604) https://exchange.xforce.ibmcloud.com/vulnerabilities/46604 Common Vulnerability Exposure (CVE) ID: CVE-2008-5514 BugTraq ID: 32958 http://www.securityfocus.com/bid/32958 https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00846.html http://securitytracker.com/id?1021485 http://secunia.com/advisories/33275 http://secunia.com/advisories/33638 http://www.vupen.com/english/advisories/2008/3490 XForce ISS Database: uwimapd-rfc822outputchar-dos(47526) https://exchange.xforce.ibmcloud.com/vulnerabilities/47526
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.