Summary
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:14.bzip2.asc
Solution
Upgrade your system to the appropriate stable release or security branch dated after the correction date
https://secure1.securityspace.com/smysecure/catid.html?in=FreeBSD-SA-05:14.bzip2.asc
Insight
bzip2 is a block-sorting file compression utility.
Two problems have been discovered relating to the extraction of bzip2-compressed files. First, a carefully constructed invalid bzip2 archive can cause bzip2 to enter an infinite loop. Second, when creating a new file, bzip2 closes the file before setting its permissions.
Severity
Classification
-
CVE CVE-2005-0953 -
CVSS Base Score: 3.7
AV:L/AC:H/Au:N/C:P/I:P/A:P
Related Vulnerabilities