RHEL 3 / 4 : gedit (RHSA-2005:499)

low Nessus Plugin ID 18473

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

An updated gedit package that fixes a file name format string vulnerability is now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team

gEdit is a small text editor designed specifically for the GNOME GUI desktop.

A file name format string vulnerability has been discovered in gEdit.
It is possible for an attacker to create a file with a carefully crafted name which, when the file is opened, executes arbitrary instructions on a victim's machine. Although it is unlikely that a user would manually open a file with such a carefully crafted file name, a user could, for example, be tricked into opening such a file from within an email client. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1686 to this issue.

Users of gEdit should upgrade to this updated package, which contains a backported patch to correct this issue.

Solution

Update the affected gedit and / or gedit-devel packages.

Plugin Details

Severity: Low

ID: 18473

File Name: redhat-RHSA-2005-499.nasl

Version: 1.27

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 6/13/2005

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Low

Base Score: 2.6

Temporal Score: 2

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:gedit, p-cpe:/a:redhat:enterprise_linux:gedit-devel, cpe:/o:redhat:enterprise_linux:3, cpe:/o:redhat:enterprise_linux:4

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/13/2005

Vulnerability Publication Date: 5/20/2005

Reference Information

CVE: CVE-2005-1686

BID: 13699

RHSA: 2005:499

Detections

Analytics