This script is Copyright (C) 2005-2014 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200501-11
(Dillo: Format string vulnerability)
Gentoo Linux developer Tavis Ormandy found a format string bug in
Dillo's handling of messages in a_Interface_msg().
An attacker could craft a malicious web page which, when accessed
using Dillo, would trigger the format string vulnerability and
potentially execute arbitrary code with the rights of the user running
There is no known workaround at this time.
See also :
All Dillo users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-client/dillo-0.8.3-r4'
Risk factor :
High / CVSS Base Score : 7.5
Family: Gentoo Local Security Checks
Nessus Plugin ID: 16402 (gentoo_GLSA-200501-11.nasl)
CVE ID: CVE-2005-0012