Summary
The remote host is missing an update to dia
announced via advisory FEDORA-2009-1057.
Solution
Apply the appropriate updates.
This update can be installed with the yum update program. Use su -c 'yum update dia' at the command line.
For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-1057
Insight
Update Information:
Filter out untrusted python modules search path to remove the possibility to run arbitrary code on the user's system if there is a python file in dia's working directory named the same as one that dia's python scripts try to import.
ChangeLog:
* Mon Jan 26 2009 Caolán McNamara 1:0.96.1-7
- Resolves: rhbz#481551 python modules search path
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2008-5984 -
CVSS Base Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities