How to Buy
This script is Copyright (C) 2008-2015 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200810-01
(WordNet: Execution of arbitrary code)
Jukka Ruohonen initially reported a boundary error within the
searchwn() function in src/wn.c. A thorough investigation by the oCERT
team revealed several other vulnerabilities in WordNet:
Jukka Ruohonen and Rob Holland (oCERT) reported multiple boundary
errors within the searchwn() function in src/wn.c, the wngrep()
function in lib/search.c, the morphstr() and morphword() functions in
lib/morph.c, and the getindex() in lib/search.c, which lead to
stack-based buffer overflows.
Rob Holland (oCERT) reported two
boundary errors within the do_init() function in lib/morph.c, which
lead to stack-based buffer overflows via specially crafted
'WNSEARCHDIR' or 'WNHOME' environment variables.
(oCERT) reported multiple boundary errors in the bin_search() and
bin_search_key() functions in binsrch.c, which lead to stack-based
buffer overflows via specially crafted data files.
(oCERT) reported a boundary error within the parse_index() function in
lib/search.c, which leads to a heap-based buffer overflow via specially
crafted data files.
In case the application is accessible e.g. via a web server,
a remote attacker could pass overly long strings as arguments to the
'wm' binary, possibly leading to the execution of arbitrary code.
A local attacker could exploit the second vulnerability via
specially crafted 'WNSEARCHDIR' or 'WNHOME' environment variables,
possibly leading to the execution of arbitrary code with escalated
A local attacker could exploit the third and
fourth vulnerability by making the application use specially crafted
data files, possibly leading to the execution of arbitrary code.
There is no known workaround at this time.
See also :
All WordNet users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=app-dicts/wordnet-3.0-r2'
Risk factor :
Critical / CVSS Base Score : 10.0
Family: Gentoo Local Security Checks
Nessus Plugin ID: 34365 (gentoo_GLSA-200810-01.nasl)
CVE ID: CVE-2008-2149CVE-2008-3908
Nessus Professional: Scan unlimited IPs, run compliance checks & moreNessus Cloud: The power of Nessus for teams – from the cloud
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.