Summary
The remote host is missing an update to uucp
announced via advisory DSA 129-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20129-1
Insight
We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings.
This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 (potato) and in version 1.06.1-18 for the upcoming (woody) release.
We recommend you upgrade your uucp package immediately.
Severity
Classification
-
CVE CVE-2002-0912 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities