Summary
The remote host is missing an update to id3lib3.8.3 announced via advisory DSA 1365-2.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201365-2
Insight
Nikolaus Schulz discovered that a programming error in id3lib, an ID3 Tag Library, may lead to denial of service through symlink attacks.
This update to DSA 1365-2 provides fixes packages for the stable distribution (etch).
We recommend that you upgrade your id3lib3.8.3 packages.
Severity
Classification
-
CVE CVE-2007-4460 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities