Summary
The remote host is missing an update to uucp
announced via advisory DSA 079-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20079-1
Insight
zen-parse has found a problem with Taylor UUCP as distributed with many GNU/Linux distributions. It was possible to make `uux' execute `uucp' with malicious commandline arguments which gives an attacker access to files owned by uid/gid uucp.
This problem has been fixed in version of 1.06.1-11potato1 for Debian GNU/Linux 2.2 by using a patch that RedHat has provided.
We recommend that you upgrade your uucp package immediately.
Severity
Classification
-
CVE CVE-2001-0873 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities