Synopsis :

The remote Debian host is missing a security-related update.

Description :

A buffer overflow has been discovered in the crossfire game which
allows remote attackers to execute arbitrary code.

See also :

http://www.debian.org/security/2006/dsa-1009

Solution :

Upgrade the crossfire package.

For the old stable distribution (woody) this problem has been fixed in
version 1.1.0-1woody2.

For the stable distribution (sarge) this problem has been fixed in
version 1.6.0.dfsg.1-4sarge2.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)