Summary
The remote host is missing an update to super
announced via advisory DSA 522-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20522-1
Insight
Max Vozeler discovered a format string vulnerability in super, a program to allow specified users to execute commands with root privileges. This vulnerability could potentially be exploited by a local user to execute arbitrary code with root privileges.
For the current stable distribution (woody), this problem has been fixed in version 3.16.1-1.2.
For the unstable distribution (sid), this problem will has been fixed in version 3.23.0-1.
We recommend that you update your super package.
Severity
Classification
-
CVE CVE-2004-0579 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities