Mandrake Linux Security Advisory : file (MDKSA-2007:067)
High Nessus Plugin ID 24893
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionJean-Sebastien Guay-Leroux discovered an integer underflow in the file_printf() function in file prior to 4.20 that allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
Updated packages have been patched to address this issue.
SolutionUpdate the affected packages.