severity 420875 grave thanks > According to debsecan and current CVEs is Debian vulnerable to > CVE-2007-1734. Because this is remote exploitable i set the priority of > this bug report to critical. Huh? CVE-2007-1734 is only locally exploitable according to the published sources. The text you quoted applies to CVE-2007-1497, which does not allow privilege escalaton on the machine itself.