Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.guay-leroux.com/projects/zoo-advisory.txt http://www.vuxml.org/freebsd/d9307a41-c4d7-11da-b2fb-000e0c2e438a.html
Insight
The following package is affected: zoo
CVE-2006-0855
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier allows user-complicit attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
Severity
Classification
-
CVE CVE-2006-0855 -
CVSS Base Score: 5.1
AV:N/AC:H/Au:N/C:P/I:P/A:P
Related Vulnerabilities