home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2003-008.nasl < prev    next >
Text File  |  2005-01-14  |  3KB  |  122 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2003:008
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(13993);
  12.  script_version ("$Revision: 1.2 $");
  13.  script_cve_id("CAN-2002-1363");
  14.  
  15.  name["english"] = "MDKSA-2003:008: libpng";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2003:008 (libpng).
  21.  
  22.  
  23. A buffer overflow vulnerability was discovered in libpng due to a wrong
  24. calculation of some loop offset values. This buffer overflow can lead to Denial
  25. of Service or even remote compromise.
  26. After the upgrade, all applications that use libpng should be restarted. Many
  27. applications are linked to libpng, so if you are unsure of what applications to
  28. restart, you may wish to reboot the system. MandrakeSoft encourages all users to
  29. upgrade immediately.
  30.  
  31.  
  32. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:008
  33. Risk factor : High";
  34.  
  35.  
  36.  
  37.  script_description(english:desc["english"]);
  38.  
  39.  summary["english"] = "Check for the version of the libpng package";
  40.  script_summary(english:summary["english"]);
  41.  
  42.  script_category(ACT_GATHER_INFO);
  43.  
  44.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  45.  family["english"] = "Mandrake Local Security Checks";
  46.  script_family(english:family["english"]);
  47.  
  48.  script_dependencies("ssh_get_info.nasl");
  49.  script_require_keys("Host/Mandrake/rpm-list");
  50.  exit(0);
  51. }
  52.  
  53. include("rpm.inc");
  54. if ( rpm_check( reference:"libpng-1.0.8-2.2mdk", release:"MDK7.2", yank:"mdk") )
  55. {
  56.  security_hole(0);
  57.  exit(0);
  58. }
  59. if ( rpm_check( reference:"libpng-devel-1.0.8-2.2mdk", release:"MDK7.2", yank:"mdk") )
  60. {
  61.  security_hole(0);
  62.  exit(0);
  63. }
  64. if ( rpm_check( reference:"libpng2-1.0.9-1.2mdk", release:"MDK8.0", yank:"mdk") )
  65. {
  66.  security_hole(0);
  67.  exit(0);
  68. }
  69. if ( rpm_check( reference:"libpng2-devel-1.0.9-1.2mdk", release:"MDK8.0", yank:"mdk") )
  70. {
  71.  security_hole(0);
  72.  exit(0);
  73. }
  74. if ( rpm_check( reference:"libpng2-1.0.12-2.2mdk", release:"MDK8.1", yank:"mdk") )
  75. {
  76.  security_hole(0);
  77.  exit(0);
  78. }
  79. if ( rpm_check( reference:"libpng2-devel-1.0.12-2.2mdk", release:"MDK8.1", yank:"mdk") )
  80. {
  81.  security_hole(0);
  82.  exit(0);
  83. }
  84. if ( rpm_check( reference:"libpng3-1.2.4-3.2mdk", release:"MDK8.2", yank:"mdk") )
  85. {
  86.  security_hole(0);
  87.  exit(0);
  88. }
  89. if ( rpm_check( reference:"libpng3-devel-1.2.4-3.2mdk", release:"MDK8.2", yank:"mdk") )
  90. {
  91.  security_hole(0);
  92.  exit(0);
  93. }
  94. if ( rpm_check( reference:"libpng3-static-devel-1.2.4-3.2mdk", release:"MDK8.2", yank:"mdk") )
  95. {
  96.  security_hole(0);
  97.  exit(0);
  98. }
  99. if ( rpm_check( reference:"libpng3-1.2.4-3.2mdk", release:"MDK9.0", yank:"mdk") )
  100. {
  101.  security_hole(0);
  102.  exit(0);
  103. }
  104. if ( rpm_check( reference:"libpng3-devel-1.2.4-3.2mdk", release:"MDK9.0", yank:"mdk") )
  105. {
  106.  security_hole(0);
  107.  exit(0);
  108. }
  109. if ( rpm_check( reference:"libpng3-static-devel-1.2.4-3.2mdk", release:"MDK9.0", yank:"mdk") )
  110. {
  111.  security_hole(0);
  112.  exit(0);
  113. }
  114. if (rpm_exists(rpm:"libpng-", release:"MDK7.2")
  115.  || rpm_exists(rpm:"libpng-", release:"MDK8.0")
  116.  || rpm_exists(rpm:"libpng-", release:"MDK8.1")
  117.  || rpm_exists(rpm:"libpng-", release:"MDK8.2")
  118.  || rpm_exists(rpm:"libpng-", release:"MDK9.0") )
  119. {
  120.  set_kb_item(name:"CAN-2002-1363", value:TRUE);
  121. }
  122.