This script is Copyright (C) 2013-2014 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-201301-02
(HAProxy: Arbitrary code execution)
A boundary error in HAProxy could cause a buffer overflow when header
rewriting is enabled and the configuration sets global.tune.bufsize to a
value greater than the default (16384 bytes).
A remote attacker could possibly execute arbitrary code with the
privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
See also :
All HAProxy users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=net-proxy/haproxy-1.4.21'
Risk factor :
Medium / CVSS Base Score : 5.1
CVSS Temporal Score : 3.8
Public Exploit Available : false