Summary
The remote host is missing an update to gopher
announced via advisory DSA 770-1.
John Goerzen discovered that gopher, a client for the Gopher Distributed Hypertext protocol, creates temporary files in an insecure fashion.
For the old stable distribution (woody) this problem has been fixed in version 3.0.3woody3.
Solution
For the stable distribution (sarge) this problem has been fixed in version 3.0.7sarge1.
For the unstable distribution (sid) this problem has been fixed in version 3.0.9.
We recommend that you upgrade your gopher package.
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20770-1
Severity
Classification
-
CVE CVE-2005-1853 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities