Detections
Analytics
Debian DSA-1421-1 : wesnoth - directory traversal
high Nessus Plugin ID 29228
Synopsis
The remote Debian host is missing a security-related update.Description
A vulnerability has been discovered in Battle for Wesnoth that allows remote attackers to read arbitrary files the user running the client has access to on the machine running the game client.Solution
Upgrade the wesnoth package.For the old stable distribution (sarge) this problem has been fixed in version 0.9.0-7.
For the stable distribution (etch) this problem has been fixed in version 1.2-3.
For the stable backports distribution (etch-backports) this problem has been fixed in version 1.2.8-1~bpo40+1.
See Also
Plugin Details
Severity: High
ID: 29228
File Name: debian_DSA-1421.nasl
Version: 1.19
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 12/7/2007
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:C
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:wesnoth, cpe:/o:debian:debian_linux:3.1, cpe:/o:debian:debian_linux:4.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Patch Publication Date: 12/6/2007
Reference Information
CVE: CVE-2007-5742, CVE-2007-6201