Detections
Analytics
Debian DSA-1086-1 : xmcd - design flaw
low Nessus Plugin ID 22628
Synopsis
The remote Debian host is missing a security-related update.Description
The xmcdconfig creates directories world-writeable allowing local users to fill the /usr and /var partition and hence cause a denial of service. This problem has been half-fixed since version 2.3-1.Solution
Upgrade the xmcd package.For the old stable distribution (woody) this problem has been fixed in version 2.6-14woody1.
For the stable distribution (sarge) this problem has been fixed in version 2.6-17sarge1.
See Also
Plugin Details
Severity: Low
ID: 22628
File Name: debian_DSA-1086.nasl
Version: 1.14
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 10/14/2006
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Low
Base Score: 2.1
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:xmcd, cpe:/o:debian:debian_linux:3.0, cpe:/o:debian:debian_linux:3.1
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Patch Publication Date: 6/2/2006
Reference Information
CVE: CVE-2006-2542
DSA: 1086