home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2002-037.nasl < prev    next >
Text File  |  2005-01-14  |  3KB  |  120 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2002:037
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(13942);
  12.  script_version ("$Revision: 1.2 $");
  13.  
  14.  name["english"] = "MDKSA-2002:037: dhcp";
  15.  
  16.  script_name(english:name["english"]);
  17.  
  18.  desc["english"] = "
  19. The remote host is missing the patch for the advisory MDKSA-2002:037 (dhcp).
  20.  
  21.  
  22. Fermin J. Serna discovered a problem in the dhcp server and client package from
  23. versions 3.0 to 3.0.1rc8, which are affected by a format string vulnerability
  24. that can be exploited remotely. By default, these versions of DHCP are compiled
  25. with the dns update feature enabled, which allows DHCP to update DNS records.
  26. The code that logs this update has an exploitable format string vulnerability;
  27. the update message can contain data provided by the attacker, such as a
  28. hostname. A successful exploitation could give the attacker elevated privileges
  29. equivalent to the user running the DHCP daemon, which is the user dhcpd in
  30. Mandrake Linux 8.x, but root in earlier versions.
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:037
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the dhcp package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"dhcp-3.0b2pl9-4.1mdk", release:"MDK7.2", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"dhcp-client-3.0b2pl9-4.1mdk", release:"MDK7.2", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"dhcp-relay-3.0b2pl9-4.1mdk", release:"MDK7.2", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if ( rpm_check( reference:"dhcp-client-3.0-0.rc12.2.1mdk", release:"MDK8.1", yank:"mdk") )
  71. {
  72.  security_hole(0);
  73.  exit(0);
  74. }
  75. if ( rpm_check( reference:"dhcp-common-3.0-0.rc12.2.1mdk", release:"MDK8.1", yank:"mdk") )
  76. {
  77.  security_hole(0);
  78.  exit(0);
  79. }
  80. if ( rpm_check( reference:"dhcp-devel-3.0-0.rc12.2.1mdk", release:"MDK8.1", yank:"mdk") )
  81. {
  82.  security_hole(0);
  83.  exit(0);
  84. }
  85. if ( rpm_check( reference:"dhcp-relay-3.0-0.rc12.2.1mdk", release:"MDK8.1", yank:"mdk") )
  86. {
  87.  security_hole(0);
  88.  exit(0);
  89. }
  90. if ( rpm_check( reference:"dhcp-server-3.0-0.rc12.2.1mdk", release:"MDK8.1", yank:"mdk") )
  91. {
  92.  security_hole(0);
  93.  exit(0);
  94. }
  95. if ( rpm_check( reference:"dhcp-client-3.0-1rc8.2.1mdk", release:"MDK8.2", yank:"mdk") )
  96. {
  97.  security_hole(0);
  98.  exit(0);
  99. }
  100. if ( rpm_check( reference:"dhcp-common-3.0-1rc8.2.1mdk", release:"MDK8.2", yank:"mdk") )
  101. {
  102.  security_hole(0);
  103.  exit(0);
  104. }
  105. if ( rpm_check( reference:"dhcp-devel-3.0-1rc8.2.1mdk", release:"MDK8.2", yank:"mdk") )
  106. {
  107.  security_hole(0);
  108.  exit(0);
  109. }
  110. if ( rpm_check( reference:"dhcp-relay-3.0-1rc8.2.1mdk", release:"MDK8.2", yank:"mdk") )
  111. {
  112.  security_hole(0);
  113.  exit(0);
  114. }
  115. if ( rpm_check( reference:"dhcp-server-3.0-1rc8.2.1mdk", release:"MDK8.2", yank:"mdk") )
  116. {
  117.  security_hole(0);
  118.  exit(0);
  119. }
  120.