home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2002-036.nasl < prev    next >
Text File  |  2005-01-14  |  4KB  |  138 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2002:036
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(13941);
  12.  script_bugtraq_id(4788);
  13.  script_version ("$Revision: 1.3 $");
  14.  script_cve_id("CAN-2002-0146");
  15.  
  16.  name["english"] = "MDKSA-2002:036: fetchmail";
  17.  
  18.  script_name(english:name["english"]);
  19.  
  20.  desc["english"] = "
  21. The remote host is missing the patch for the advisory MDKSA-2002:036 (fetchmail).
  22.  
  23.  
  24. A problem was discovered with versions of fetchmail prior to 5.9.10 that was
  25. triggered by retreiving mail from an IMAP server. The fetchmail client will
  26. allocate an array to store the sizes of the messages it is attempting to
  27. retrieve. This array size is determined by the number of messages the server is
  28. claiming to have, and fetchmail would not check whether or not the number of
  29. messages the server was claiming was too high. This would allow a malicious
  30. server to make the fetchmail process write data outside of the array bounds.
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:036
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the fetchmail package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"fetchmail-5.9.11-6.3mdk", release:"MDK7.1", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"fetchmail-daemon-5.9.11-6.3mdk", release:"MDK7.1", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"fetchmailconf-5.9.11-6.3mdk", release:"MDK7.1", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if ( rpm_check( reference:"fetchmail-5.9.11-6.3mdk", release:"MDK7.2", yank:"mdk") )
  71. {
  72.  security_hole(0);
  73.  exit(0);
  74. }
  75. if ( rpm_check( reference:"fetchmail-daemon-5.9.11-6.3mdk", release:"MDK7.2", yank:"mdk") )
  76. {
  77.  security_hole(0);
  78.  exit(0);
  79. }
  80. if ( rpm_check( reference:"fetchmailconf-5.9.11-6.3mdk", release:"MDK7.2", yank:"mdk") )
  81. {
  82.  security_hole(0);
  83.  exit(0);
  84. }
  85. if ( rpm_check( reference:"fetchmail-5.9.11-6.2mdk", release:"MDK8.0", yank:"mdk") )
  86. {
  87.  security_hole(0);
  88.  exit(0);
  89. }
  90. if ( rpm_check( reference:"fetchmail-daemon-5.9.11-6.2mdk", release:"MDK8.0", yank:"mdk") )
  91. {
  92.  security_hole(0);
  93.  exit(0);
  94. }
  95. if ( rpm_check( reference:"fetchmailconf-5.9.11-6.2mdk", release:"MDK8.0", yank:"mdk") )
  96. {
  97.  security_hole(0);
  98.  exit(0);
  99. }
  100. if ( rpm_check( reference:"fetchmail-5.9.11-6.1mdk", release:"MDK8.1", yank:"mdk") )
  101. {
  102.  security_hole(0);
  103.  exit(0);
  104. }
  105. if ( rpm_check( reference:"fetchmail-daemon-5.9.11-6.1mdk", release:"MDK8.1", yank:"mdk") )
  106. {
  107.  security_hole(0);
  108.  exit(0);
  109. }
  110. if ( rpm_check( reference:"fetchmailconf-5.9.11-6.1mdk", release:"MDK8.1", yank:"mdk") )
  111. {
  112.  security_hole(0);
  113.  exit(0);
  114. }
  115. if ( rpm_check( reference:"fetchmail-5.9.11-6.1mdk", release:"MDK8.2", yank:"mdk") )
  116. {
  117.  security_hole(0);
  118.  exit(0);
  119. }
  120. if ( rpm_check( reference:"fetchmail-daemon-5.9.11-6.1mdk", release:"MDK8.2", yank:"mdk") )
  121. {
  122.  security_hole(0);
  123.  exit(0);
  124. }
  125. if ( rpm_check( reference:"fetchmailconf-5.9.11-6.1mdk", release:"MDK8.2", yank:"mdk") )
  126. {
  127.  security_hole(0);
  128.  exit(0);
  129. }
  130. if (rpm_exists(rpm:"fetchmail-", release:"MDK7.1")
  131.  || rpm_exists(rpm:"fetchmail-", release:"MDK7.2")
  132.  || rpm_exists(rpm:"fetchmail-", release:"MDK8.0")
  133.  || rpm_exists(rpm:"fetchmail-", release:"MDK8.1")
  134.  || rpm_exists(rpm:"fetchmail-", release:"MDK8.2") )
  135. {
  136.  set_kb_item(name:"CAN-2002-0146", value:TRUE);
  137. }
  138.