home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2003-089.nasl < prev    next >
Text File  |  2005-01-14  |  5KB  |  200 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2003:089
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(14071);
  12.  script_version ("$Revision: 1.2 $");
  13.  script_cve_id("CAN-2003-0730");
  14.  
  15.  name["english"] = "MDKSA-2003:089: XFree86";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2003:089 (XFree86).
  21.  
  22.  
  23. Several vulnerabilities were discovered by blexim(at)hush.com in the font
  24. libraries of XFree86 version 4.3.0 and earlier. These bugs could potentially
  25. lead to execution of arbitrary code or a DoS by a remote user in any way that
  26. calls these functions, which are related to the transfer and enumeration of
  27. fonts from font servers to clients.
  28. As well, some bugs were fixed in XFree86 as released with Mandrake Linux 9.2,
  29. specifically a problem where X would freeze with a black screen at logout or
  30. shutdown with DRI enabled on certain ATI Radeon cards.
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:089
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the XFree86 package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"X11R6-contrib-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"XFree86-100dpi-fonts-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"XFree86-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if ( rpm_check( reference:"XFree86-75dpi-fonts-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  71. {
  72.  security_hole(0);
  73.  exit(0);
  74. }
  75. if ( rpm_check( reference:"XFree86-Xnest-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  76. {
  77.  security_hole(0);
  78.  exit(0);
  79. }
  80. if ( rpm_check( reference:"XFree86-Xvfb-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  81. {
  82.  security_hole(0);
  83.  exit(0);
  84. }
  85. if ( rpm_check( reference:"XFree86-cyrillic-fonts-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  86. {
  87.  security_hole(0);
  88.  exit(0);
  89. }
  90. if ( rpm_check( reference:"XFree86-devel-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  91. {
  92.  security_hole(0);
  93.  exit(0);
  94. }
  95. if ( rpm_check( reference:"XFree86-doc-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  96. {
  97.  security_hole(0);
  98.  exit(0);
  99. }
  100. if ( rpm_check( reference:"XFree86-glide-module-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  101. {
  102.  security_hole(0);
  103.  exit(0);
  104. }
  105. if ( rpm_check( reference:"XFree86-libs-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  106. {
  107.  security_hole(0);
  108.  exit(0);
  109. }
  110. if ( rpm_check( reference:"XFree86-server-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  111. {
  112.  security_hole(0);
  113.  exit(0);
  114. }
  115. if ( rpm_check( reference:"XFree86-static-libs-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  116. {
  117.  security_hole(0);
  118.  exit(0);
  119. }
  120. if ( rpm_check( reference:"XFree86-xfs-4.2.1-3.1mdk", release:"MDK9.0", yank:"mdk") )
  121. {
  122.  security_hole(0);
  123.  exit(0);
  124. }
  125. if ( rpm_check( reference:"X11R6-contrib-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  126. {
  127.  security_hole(0);
  128.  exit(0);
  129. }
  130. if ( rpm_check( reference:"XFree86-100dpi-fonts-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  131. {
  132.  security_hole(0);
  133.  exit(0);
  134. }
  135. if ( rpm_check( reference:"XFree86-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  136. {
  137.  security_hole(0);
  138.  exit(0);
  139. }
  140. if ( rpm_check( reference:"XFree86-75dpi-fonts-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  141. {
  142.  security_hole(0);
  143.  exit(0);
  144. }
  145. if ( rpm_check( reference:"XFree86-Xnest-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  146. {
  147.  security_hole(0);
  148.  exit(0);
  149. }
  150. if ( rpm_check( reference:"XFree86-Xvfb-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  151. {
  152.  security_hole(0);
  153.  exit(0);
  154. }
  155. if ( rpm_check( reference:"XFree86-cyrillic-fonts-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  156. {
  157.  security_hole(0);
  158.  exit(0);
  159. }
  160. if ( rpm_check( reference:"XFree86-devel-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  161. {
  162.  security_hole(0);
  163.  exit(0);
  164. }
  165. if ( rpm_check( reference:"XFree86-doc-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  166. {
  167.  security_hole(0);
  168.  exit(0);
  169. }
  170. if ( rpm_check( reference:"XFree86-glide-module-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  171. {
  172.  security_hole(0);
  173.  exit(0);
  174. }
  175. if ( rpm_check( reference:"XFree86-libs-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  176. {
  177.  security_hole(0);
  178.  exit(0);
  179. }
  180. if ( rpm_check( reference:"XFree86-server-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  181. {
  182.  security_hole(0);
  183.  exit(0);
  184. }
  185. if ( rpm_check( reference:"XFree86-static-libs-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  186. {
  187.  security_hole(0);
  188.  exit(0);
  189. }
  190. if ( rpm_check( reference:"XFree86-xfs-4.3-8.2mdk", release:"MDK9.1", yank:"mdk") )
  191. {
  192.  security_hole(0);
  193.  exit(0);
  194. }
  195. if (rpm_exists(rpm:"XFree86-", release:"MDK9.0")
  196.  || rpm_exists(rpm:"XFree86-", release:"MDK9.1") )
  197. {
  198.  set_kb_item(name:"CAN-2003-0730", value:TRUE);
  199. }
  200.