Summary
The remote host is missing updates announced in
advisory GLSA 200406-15.
Solution
Usermin users should upgrade to the latest version:
# emerge sync
# emerge -pv '>=app-admin/usermin-1.080'
# emerge '>=app-admin/usermin-1.080'
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200406-15 http://bugs.gentoo.org/show_bug.cgi?id=54030
http://www.securityfocus.com/bid/10521
http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html
Insight
Usermin contains two security vulnerabilities which could lead to a Denial of Service attack and information disclosure.
Severity
Classification
-
CVE CVE-2004-0583, CVE-2004-0588 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities