Summary
The remote host is missing an update to mono
announced via advisory DSA 1397-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201397-1
Insight
An integer overflow in the BigInteger data type implementation has been discovred in the free .NET runtime Mono.
The oldstable distribution (sarge) doesn't contain mono.
For the stable distribution (etch) this problem has been fixed in version 1.2.2.1-1etch1. A powerpc build will be provided later.
The unstable distribution (sid) will be fixed soon.
We recommend that you upgrade your mono packages.
Severity
Classification
-
CVE CVE-2007-5197 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities