home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2003-033.nasl < prev    next >
Text File  |  2005-01-14  |  3KB  |  112 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2003:033
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(14017);
  12.  script_version ("$Revision: 1.2 $");
  13.  script_cve_id("CAN-2003-0107");
  14.  
  15.  name["english"] = "MDKSA-2003:033: zlib";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2003:033 (zlib).
  21.  
  22.  
  23. Richard Kettlewell discovered a buffer overflow vulnerability in the zlib
  24. library's gzprintf() function. This can be used by attackers to cause a denial
  25. of service or possibly even the execution of arbitrary code. Our thanks to the
  26. OpenPKG team for providing a patch which adds the necessary configure script
  27. checks to always use the secure vsnprintf(3) and snprintf(3) functions, and
  28. which additionally adjusts the code to correctly take into account the return
  29. value of vsnprintf(3) and snprintf(3).
  30.  
  31.  
  32. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:033
  33. Risk factor : High";
  34.  
  35.  
  36.  
  37.  script_description(english:desc["english"]);
  38.  
  39.  summary["english"] = "Check for the version of the zlib package";
  40.  script_summary(english:summary["english"]);
  41.  
  42.  script_category(ACT_GATHER_INFO);
  43.  
  44.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  45.  family["english"] = "Mandrake Local Security Checks";
  46.  script_family(english:family["english"]);
  47.  
  48.  script_dependencies("ssh_get_info.nasl");
  49.  script_require_keys("Host/Mandrake/rpm-list");
  50.  exit(0);
  51. }
  52.  
  53. include("rpm.inc");
  54. if ( rpm_check( reference:"zlib-1.1.3-11.2mdk", release:"MDK7.2", yank:"mdk") )
  55. {
  56.  security_hole(0);
  57.  exit(0);
  58. }
  59. if ( rpm_check( reference:"zlib-devel-1.1.3-11.2mdk", release:"MDK7.2", yank:"mdk") )
  60. {
  61.  security_hole(0);
  62.  exit(0);
  63. }
  64. if ( rpm_check( reference:"zlib1-1.1.3-16.2mdk", release:"MDK8.0", yank:"mdk") )
  65. {
  66.  security_hole(0);
  67.  exit(0);
  68. }
  69. if ( rpm_check( reference:"zlib1-devel-1.1.3-16.2mdk", release:"MDK8.0", yank:"mdk") )
  70. {
  71.  security_hole(0);
  72.  exit(0);
  73. }
  74. if ( rpm_check( reference:"zlib1-1.1.3-16.2mdk", release:"MDK8.1", yank:"mdk") )
  75. {
  76.  security_hole(0);
  77.  exit(0);
  78. }
  79. if ( rpm_check( reference:"zlib1-devel-1.1.3-16.2mdk", release:"MDK8.1", yank:"mdk") )
  80. {
  81.  security_hole(0);
  82.  exit(0);
  83. }
  84. if ( rpm_check( reference:"zlib1-1.1.3-19.1mdk", release:"MDK8.2", yank:"mdk") )
  85. {
  86.  security_hole(0);
  87.  exit(0);
  88. }
  89. if ( rpm_check( reference:"zlib1-devel-1.1.3-19.1mdk", release:"MDK8.2", yank:"mdk") )
  90. {
  91.  security_hole(0);
  92.  exit(0);
  93. }
  94. if ( rpm_check( reference:"zlib1-1.1.4-5.1mdk", release:"MDK9.0", yank:"mdk") )
  95. {
  96.  security_hole(0);
  97.  exit(0);
  98. }
  99. if ( rpm_check( reference:"zlib1-devel-1.1.4-5.1mdk", release:"MDK9.0", yank:"mdk") )
  100. {
  101.  security_hole(0);
  102.  exit(0);
  103. }
  104. if (rpm_exists(rpm:"zlib-", release:"MDK7.2")
  105.  || rpm_exists(rpm:"zlib-", release:"MDK8.0")
  106.  || rpm_exists(rpm:"zlib-", release:"MDK8.1")
  107.  || rpm_exists(rpm:"zlib-", release:"MDK8.2")
  108.  || rpm_exists(rpm:"zlib-", release:"MDK9.0") )
  109. {
  110.  set_kb_item(name:"CAN-2003-0107", value:TRUE);
  111. }
  112.