Detections
Analytics
Scientific Linux Security Update : elinks on SL4.x, SL5.x i386/x86_64
high Nessus Plugin ID 60673
Language:
Synopsis
The remote Scientific Linux host is missing a security update.Description
CVE-2007-2027 elinks tries to load .po files from a non-absolute pathCVE-2008-7224 elinks: entity_cache static array buffer overflow (off-by-one)
An off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A remote attacker could use this flaw to create a specially crafted HTML file that would cause ELinks to crash or, possibly, execute arbitrary code when rendered. (CVE-2008-7224)
It was discovered that ELinks tried to load translation files using relative paths. A local attacker able to trick a victim into running ELinks in a folder containing specially crafted translation files could use this flaw to confuse the victim via incorrect translations, or cause ELinks to crash and possibly execute arbitrary code via embedded formatting sequences in translated messages. (CVE-2007-2027)
Solution
Update the affected elinks package.See Also
Plugin Details
Severity: High
ID: 60673
File Name: sl_20091001_elinks_on_SL4_x.nasl
Version: 1.7
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.5
CVSS v2
Risk Factor: High
Base Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 10/1/2009
Reference Information
CVE: CVE-2007-2027, CVE-2008-7224