oval:org.mitre.oval:def:12670

Definition Id: oval:org.mitre.oval:def:12670

Oval ID:	oval:org.mitre.oval:def:12670
Title:	DSA-2108-1 cvsnt -- programming error
Description:	It has been discovered that in cvsnt, a multi-platform version of the original source code versioning system CVS, an error in the authentication code allows a malicious, unprivileged user, through the use of a specially crafted branch name, to gain write access to any module or directory, including CVSROOT itself. The attacker can then execute arbitrary code as root by modifying or adding administrative scripts in that directory. For the stable distribution, this problem has been fixed in version 2.5.03.2382-3.3+lenny1. We recommend that you upgrade your cvsnt package.
Family:	unix	Class:	patch
Reference(s):	DSA-2108-1 CVE-2010-1326	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	cvsnt
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND cvsnt DPKG is earlier than 2.5.03.2382-3.3+lenny1

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:12670