Summary
The remote host is missing an update to feta
announced via advisory DSA 1643-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201643-1
Insight
Dmitry E. Oboukhov discovered that the to-upgrade plugin of Feta, a simpler interface to APT, dpkg, and other Debian package tools creates temporary files insecurely, which may lead to local denial of service through symlink attacks.
For the stable distribution (etch), this problem has been fixed in version 1.4.15+etch1.
For the unstable distribution (sid), this problem has been fixed in version 1.4.16+nmu1.
We recommend that you upgrade your feta package.
Severity
Classification
-
CVE CVE-2008-4440 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities