home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2002-041.nasl < prev    next >
Text File  |  2005-01-14  |  12KB  |  416 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2002:041
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(13945);
  12.  script_version ("$Revision: 1.2 $");
  13.  
  14.  name["english"] = "MDKSA-2002:041: kernel";
  15.  
  16.  script_name(english:name["english"]);
  17.  
  18.  desc["english"] = "
  19. The remote host is missing the patch for the advisory MDKSA-2002:041 (kernel).
  20.  
  21.  
  22. A problem was discovered in the CIPE (VPN tunnel) implementation in the Linux
  23. kernel where a malformed packet could cause a crash.
  24. Andrew Griffiths discovered a vulnerability that allows remote machines to read
  25. random memory by utilizing a bug in the ICMP implementation of Linux kernels.
  26. This only affects kernels prior to 2.4.0-test6 and 2.2.18; all Mandrake Linux
  27. 2.4 kernels are not vulnerable to this problem.
  28. Another problem was discovered by the Linux Netfilter team in the IRC connection
  29. tracking component of netfilter in Linux 2.4 kernels. It consists of a very
  30. broad netmask setting which is applied to check if an IRC DCC connection through
  31. a masqueraded firewall should be allowed. This would lead to unwanted ports
  32. being opened on the firewall which could possibly allow inbound connections
  33. depending on the firewall rules in use.
  34. The 2.2 and 2.4 kernels are also affected by the zlib double-free() problem as
  35. routines from the compression library are used by functions that uncompress
  36. filesystems loaded into ramdisks and other occassions that are not
  37. security-critical. The kernel also uses the compression library in the PPP layer
  38. as well as the freeswan IPSec kernel module.
  39. As well, a number of other non-security fixes are present in these kernels,
  40. including new and enhanced drivers, LSB compliance, and more.
  41. MandrakeSoft encourages all users to upgrade their kernel as soon as possible to
  42. these new 2.2 and 2.4 kernels.
  43. NOTE: This update cannot be accomplished via MandrakeUpdate; it must be done on
  44. the console. This prevents one from upgrading a kernel instead of installing a
  45. new kernel. To upgrade, please ensure that you have first upgraded iptables,
  46. mkinitrd, and initscripts packages if they are applicable to your platform. Use
  47. 'rpm -ivh kernel_package' to install the new kernel. Prior to rebooting,
  48. double-check your /etc/lilo.conf, /boot/grub/menu.lst, or /etc/yaboot.conf (PPC
  49. users only) to ensure that you are able to boot properly into both old and new
  50. kernels (this will allow you to boot into the old kernel if the new kernel does
  51. not work to your liking).
  52. LILO users should execute '/sbin/lilo -v', GRUB users should execute 'sh
  53. /boot/grun/install.sh', and PPC users must type '/sbin/ybin -v' to write the
  54. boot record in order to reboot into the new kernel if you made any changes to
  55. the respective boot configuration files.
  56. New kernels for Mandrake Linux 8.1/IA64 will be available shortly.
  57.  
  58.  
  59. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:041
  60. Risk factor : High";
  61.  
  62.  
  63.  
  64.  script_description(english:desc["english"]);
  65.  
  66.  summary["english"] = "Check for the version of the kernel package";
  67.  script_summary(english:summary["english"]);
  68.  
  69.  script_category(ACT_GATHER_INFO);
  70.  
  71.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  72.  family["english"] = "Mandrake Local Security Checks";
  73.  script_family(english:family["english"]);
  74.  
  75.  script_dependencies("ssh_get_info.nasl");
  76.  script_require_keys("Host/Mandrake/rpm-list");
  77.  exit(0);
  78. }
  79.  
  80. include("rpm.inc");
  81. if ( rpm_check( reference:"alsa-2.2.19_0.5.10b-6.4mdk", release:"MDK7.1", yank:"mdk") )
  82. {
  83.  security_hole(0);
  84.  exit(0);
  85. }
  86. if ( rpm_check( reference:"alsa-source-2.2.19_0.5.10b-6.4mdk", release:"MDK7.1", yank:"mdk") )
  87. {
  88.  security_hole(0);
  89.  exit(0);
  90. }
  91. if ( rpm_check( reference:"kernel-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  92. {
  93.  security_hole(0);
  94.  exit(0);
  95. }
  96. if ( rpm_check( reference:"kernel-doc-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  97. {
  98.  security_hole(0);
  99.  exit(0);
  100. }
  101. if ( rpm_check( reference:"kernel-headers-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  102. {
  103.  security_hole(0);
  104.  exit(0);
  105. }
  106. if ( rpm_check( reference:"kernel-pcmcia-cs-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  107. {
  108.  security_hole(0);
  109.  exit(0);
  110. }
  111. if ( rpm_check( reference:"kernel-secure-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  112. {
  113.  security_hole(0);
  114.  exit(0);
  115. }
  116. if ( rpm_check( reference:"kernel-smp-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  117. {
  118.  security_hole(0);
  119.  exit(0);
  120. }
  121. if ( rpm_check( reference:"kernel-source-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  122. {
  123.  security_hole(0);
  124.  exit(0);
  125. }
  126. if ( rpm_check( reference:"kernel-utils-2.2.19-6.4mdk", release:"MDK7.1", yank:"mdk") )
  127. {
  128.  security_hole(0);
  129.  exit(0);
  130. }
  131. if ( rpm_check( reference:"reiserfs-utils-2.2.19_3.5.29-6.4mdk", release:"MDK7.1", yank:"mdk") )
  132. {
  133.  security_hole(0);
  134.  exit(0);
  135. }
  136. if ( rpm_check( reference:"alsa-2.2.19_0.5.10b-6.4mdk", release:"MDK7.2", yank:"mdk") )
  137. {
  138.  security_hole(0);
  139.  exit(0);
  140. }
  141. if ( rpm_check( reference:"alsa-source-2.2.19_0.5.10b-6.4mdk", release:"MDK7.2", yank:"mdk") )
  142. {
  143.  security_hole(0);
  144.  exit(0);
  145. }
  146. if ( rpm_check( reference:"kernel-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  147. {
  148.  security_hole(0);
  149.  exit(0);
  150. }
  151. if ( rpm_check( reference:"kernel-doc-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  152. {
  153.  security_hole(0);
  154.  exit(0);
  155. }
  156. if ( rpm_check( reference:"kernel-headers-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  157. {
  158.  security_hole(0);
  159.  exit(0);
  160. }
  161. if ( rpm_check( reference:"kernel-pcmcia-cs-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  162. {
  163.  security_hole(0);
  164.  exit(0);
  165. }
  166. if ( rpm_check( reference:"kernel-secure-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  167. {
  168.  security_hole(0);
  169.  exit(0);
  170. }
  171. if ( rpm_check( reference:"kernel-smp-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  172. {
  173.  security_hole(0);
  174.  exit(0);
  175. }
  176. if ( rpm_check( reference:"kernel-source-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  177. {
  178.  security_hole(0);
  179.  exit(0);
  180. }
  181. if ( rpm_check( reference:"kernel-utils-2.2.19-6.4mdk", release:"MDK7.2", yank:"mdk") )
  182. {
  183.  security_hole(0);
  184.  exit(0);
  185. }
  186. if ( rpm_check( reference:"reiserfs-utils-2.2.19_3.5.29-6.4mdk", release:"MDK7.2", yank:"mdk") )
  187. {
  188.  security_hole(0);
  189.  exit(0);
  190. }
  191. if ( rpm_check( reference:"initscripts-5.83-7.1mdk", release:"MDK8.0", yank:"mdk") )
  192. {
  193.  security_hole(0);
  194.  exit(0);
  195. }
  196. if ( rpm_check( reference:"iptables-1.2.5-1.1mdk", release:"MDK8.0", yank:"mdk") )
  197. {
  198.  security_hole(0);
  199.  exit(0);
  200. }
  201. if ( rpm_check( reference:"iptables-ipv6-1.2.5-1.1mdk", release:"MDK8.0", yank:"mdk") )
  202. {
  203.  security_hole(0);
  204.  exit(0);
  205. }
  206. if ( rpm_check( reference:"kernel-2.4.18.8.2mdk-1-3mdk", release:"MDK8.0", yank:"mdk") )
  207. {
  208.  security_hole(0);
  209.  exit(0);
  210. }
  211. if ( rpm_check( reference:"kernel-2.4.18.8.2mdk-pcmcia-cs-1-3mdk", release:"MDK8.0", yank:"mdk") )
  212. {
  213.  security_hole(0);
  214.  exit(0);
  215. }
  216. if ( rpm_check( reference:"kernel-BOOT-2.4.18.8.2mdk-1-3mdk", release:"MDK8.0", yank:"mdk") )
  217. {
  218.  security_hole(0);
  219.  exit(0);
  220. }
  221. if ( rpm_check( reference:"kernel-doc-2.4.18-8.2mdk", release:"MDK8.0", yank:"mdk") )
  222. {
  223.  security_hole(0);
  224.  exit(0);
  225. }
  226. if ( rpm_check( reference:"kernel-doc-html-2.4.18-8.2mdk", release:"MDK8.0", yank:"mdk") )
  227. {
  228.  security_hole(0);
  229.  exit(0);
  230. }
  231. if ( rpm_check( reference:"kernel-doc-pdf-2.4.18-8.2mdk", release:"MDK8.0", yank:"mdk") )
  232. {
  233.  security_hole(0);
  234.  exit(0);
  235. }
  236. if ( rpm_check( reference:"kernel-doc-ps-2.4.18-8.2mdk", release:"MDK8.0", yank:"mdk") )
  237. {
  238.  security_hole(0);
  239.  exit(0);
  240. }
  241. if ( rpm_check( reference:"kernel-secure-2.4.18.8.2mdk-1-3mdk", release:"MDK8.0", yank:"mdk") )
  242. {
  243.  security_hole(0);
  244.  exit(0);
  245. }
  246. if ( rpm_check( reference:"kernel-smp-2.4.18.8.2mdk-1-3mdk", release:"MDK8.0", yank:"mdk") )
  247. {
  248.  security_hole(0);
  249.  exit(0);
  250. }
  251. if ( rpm_check( reference:"kernel-source-2.4.18-8.2mdk", release:"MDK8.0", yank:"mdk") )
  252. {
  253.  security_hole(0);
  254.  exit(0);
  255. }
  256. if ( rpm_check( reference:"kernel22-2.2.20-9.2mdk", release:"MDK8.0", yank:"mdk") )
  257. {
  258.  security_hole(0);
  259.  exit(0);
  260. }
  261. if ( rpm_check( reference:"kernel22-smp-2.2.20-9.2mdk", release:"MDK8.0", yank:"mdk") )
  262. {
  263.  security_hole(0);
  264.  exit(0);
  265. }
  266. if ( rpm_check( reference:"kernel22-source-2.2.20-9.2mdk", release:"MDK8.0", yank:"mdk") )
  267. {
  268.  security_hole(0);
  269.  exit(0);
  270. }
  271. if ( rpm_check( reference:"mkinitrd-3.1.6-28.1mdk", release:"MDK8.0", yank:"mdk") )
  272. {
  273.  security_hole(0);
  274.  exit(0);
  275. }
  276. if ( rpm_check( reference:"iptables-1.2.5-1.1mdk", release:"MDK8.1", yank:"mdk") )
  277. {
  278.  security_hole(0);
  279.  exit(0);
  280. }
  281. if ( rpm_check( reference:"iptables-ipv6-1.2.5-1.1mdk", release:"MDK8.1", yank:"mdk") )
  282. {
  283.  security_hole(0);
  284.  exit(0);
  285. }
  286. if ( rpm_check( reference:"kernel-2.4.18.8.2mdk-1-3mdk", release:"MDK8.1", yank:"mdk") )
  287. {
  288.  security_hole(0);
  289.  exit(0);
  290. }
  291. if ( rpm_check( reference:"kernel-2.4.18.8.2mdk-pcmcia-cs-1-3mdk", release:"MDK8.1", yank:"mdk") )
  292. {
  293.  security_hole(0);
  294.  exit(0);
  295. }
  296. if ( rpm_check( reference:"kernel-doc-2.4.18-8.2mdk", release:"MDK8.1", yank:"mdk") )
  297. {
  298.  security_hole(0);
  299.  exit(0);
  300. }
  301. if ( rpm_check( reference:"kernel-doc-html-2.4.18-8.2mdk", release:"MDK8.1", yank:"mdk") )
  302. {
  303.  security_hole(0);
  304.  exit(0);
  305. }
  306. if ( rpm_check( reference:"kernel-doc-pdf-2.4.18-8.2mdk", release:"MDK8.1", yank:"mdk") )
  307. {
  308.  security_hole(0);
  309.  exit(0);
  310. }
  311. if ( rpm_check( reference:"kernel-doc-ps-2.4.18-8.2mdk", release:"MDK8.1", yank:"mdk") )
  312. {
  313.  security_hole(0);
  314.  exit(0);
  315. }
  316. if ( rpm_check( reference:"kernel-secure-2.4.18.8.2mdk-1-3mdk", release:"MDK8.1", yank:"mdk") )
  317. {
  318.  security_hole(0);
  319.  exit(0);
  320. }
  321. if ( rpm_check( reference:"kernel-smp-2.4.18.8.2mdk-1-3mdk", release:"MDK8.1", yank:"mdk") )
  322. {
  323.  security_hole(0);
  324.  exit(0);
  325. }
  326. if ( rpm_check( reference:"kernel-source-2.4.18-8.2mdk", release:"MDK8.1", yank:"mdk") )
  327. {
  328.  security_hole(0);
  329.  exit(0);
  330. }
  331. if ( rpm_check( reference:"kernel22-2.2.20-9.2mdk", release:"MDK8.1", yank:"mdk") )
  332. {
  333.  security_hole(0);
  334.  exit(0);
  335. }
  336. if ( rpm_check( reference:"kernel22-smp-2.2.20-9.2mdk", release:"MDK8.1", yank:"mdk") )
  337. {
  338.  security_hole(0);
  339.  exit(0);
  340. }
  341. if ( rpm_check( reference:"kernel22-source-2.2.20-9.2mdk", release:"MDK8.1", yank:"mdk") )
  342. {
  343.  security_hole(0);
  344.  exit(0);
  345. }
  346. if ( rpm_check( reference:"mkinitrd-3.1.6-28.1mdk", release:"MDK8.1", yank:"mdk") )
  347. {
  348.  security_hole(0);
  349.  exit(0);
  350. }
  351. if ( rpm_check( reference:"devfsd-1.3.25-1.1mdk", release:"MDK8.2", yank:"mdk") )
  352. {
  353.  security_hole(0);
  354.  exit(0);
  355. }
  356. if ( rpm_check( reference:"kernel-2.4.18.8.1mdk-1-3mdk", release:"MDK8.2", yank:"mdk") )
  357. {
  358.  security_hole(0);
  359.  exit(0);
  360. }
  361. if ( rpm_check( reference:"kernel-BOOT-2.4.18.8.1mdk-1-3mdk", release:"MDK8.2", yank:"mdk") )
  362. {
  363.  security_hole(0);
  364.  exit(0);
  365. }
  366. if ( rpm_check( reference:"kernel-doc-2.4.18-8.1mdk", release:"MDK8.2", yank:"mdk") )
  367. {
  368.  security_hole(0);
  369.  exit(0);
  370. }
  371. if ( rpm_check( reference:"kernel-doc-html-2.4.18-8.1mdk", release:"MDK8.2", yank:"mdk") )
  372. {
  373.  security_hole(0);
  374.  exit(0);
  375. }
  376. if ( rpm_check( reference:"kernel-doc-pdf-2.4.18-8.1mdk", release:"MDK8.2", yank:"mdk") )
  377. {
  378.  security_hole(0);
  379.  exit(0);
  380. }
  381. if ( rpm_check( reference:"kernel-doc-ps-2.4.18-8.1mdk", release:"MDK8.2", yank:"mdk") )
  382. {
  383.  security_hole(0);
  384.  exit(0);
  385. }
  386. if ( rpm_check( reference:"kernel-secure-2.4.18.8.1mdk-1-3mdk", release:"MDK8.2", yank:"mdk") )
  387. {
  388.  security_hole(0);
  389.  exit(0);
  390. }
  391. if ( rpm_check( reference:"kernel-smp-2.4.18.8.1mdk-1-3mdk", release:"MDK8.2", yank:"mdk") )
  392. {
  393.  security_hole(0);
  394.  exit(0);
  395. }
  396. if ( rpm_check( reference:"kernel-source-2.4.18-8.1mdk", release:"MDK8.2", yank:"mdk") )
  397. {
  398.  security_hole(0);
  399.  exit(0);
  400. }
  401. if ( rpm_check( reference:"kernel22-2.2.20-9.1mdk", release:"MDK8.2", yank:"mdk") )
  402. {
  403.  security_hole(0);
  404.  exit(0);
  405. }
  406. if ( rpm_check( reference:"kernel22-smp-2.2.20-9.1mdk", release:"MDK8.2", yank:"mdk") )
  407. {
  408.  security_hole(0);
  409.  exit(0);
  410. }
  411. if ( rpm_check( reference:"kernel22-source-2.2.20-9.1mdk", release:"MDK8.2", yank:"mdk") )
  412. {
  413.  security_hole(0);
  414.  exit(0);
  415. }
  416.