Summary
The remote host is missing an update to libsoup
announced via advisory DSA 1248-1.
Roland Lezuo and Josselin Mouette discovered that the libsoup HTTP library performs insufficient sanitising when parsing HTTP headers, which might lead to denial of service.
Solution
For the stable distribution (sarge) this problem has been fixed in version 2.2.3-2sarge1.
For the upcoming stable distribution (etch) this problem has been fixed in version 2.2.98-2.
For the unstable distribution (sid) this problem has been fixed in version 2.2.98-2.
We recommend that you upgrade your libsoup package.
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201248-1
Severity
Classification
-
CVE CVE-2006-5876 -
CVSS Base Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
Related Vulnerabilities