home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2003-107.nasl < prev    next >
Text File  |  2005-01-14  |  4KB  |  155 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2003:107
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(14089);
  12.  script_bugtraq_id(8477);
  13.  script_version ("$Revision: 1.3 $");
  14.  script_cve_id("CAN-2003-0689");
  15.  
  16.  name["english"] = "MDKSA-2003:107: glibc";
  17.  
  18.  script_name(english:name["english"]);
  19.  
  20.  desc["english"] = "
  21. The remote host is missing the patch for the advisory MDKSA-2003:107 (glibc).
  22.  
  23.  
  24. A bug was discovered in the getgrouplist function in glibc that can cause a
  25. buffer overflow if the size of the group list is too small to hold all the
  26. user's groups. This overflow can cause segementation faults in various user
  27. applications, some of which may lead to additional security problems. The
  28. problem can only be triggered if the user is in a larger number of groups than
  29. expected by an application.
  30. The provided packages are patched to address this issue.
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:107
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the glibc package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"glibc-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"glibc-devel-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"glibc-i18ndata-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if ( rpm_check( reference:"glibc-profile-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  71. {
  72.  security_hole(0);
  73.  exit(0);
  74. }
  75. if ( rpm_check( reference:"glibc-static-devel-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  76. {
  77.  security_hole(0);
  78.  exit(0);
  79. }
  80. if ( rpm_check( reference:"glibc-utils-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  81. {
  82.  security_hole(0);
  83.  exit(0);
  84. }
  85. if ( rpm_check( reference:"ldconfig-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  86. {
  87.  security_hole(0);
  88.  exit(0);
  89. }
  90. if ( rpm_check( reference:"nscd-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  91. {
  92.  security_hole(0);
  93.  exit(0);
  94. }
  95. if ( rpm_check( reference:"timezone-2.2.5-16.3.90mdk", release:"MDK9.0", yank:"mdk") )
  96. {
  97.  security_hole(0);
  98.  exit(0);
  99. }
  100. if ( rpm_check( reference:"glibc-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  101. {
  102.  security_hole(0);
  103.  exit(0);
  104. }
  105. if ( rpm_check( reference:"glibc-debug-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  106. {
  107.  security_hole(0);
  108.  exit(0);
  109. }
  110. if ( rpm_check( reference:"glibc-devel-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  111. {
  112.  security_hole(0);
  113.  exit(0);
  114. }
  115. if ( rpm_check( reference:"glibc-i18ndata-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  116. {
  117.  security_hole(0);
  118.  exit(0);
  119. }
  120. if ( rpm_check( reference:"glibc-profile-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  121. {
  122.  security_hole(0);
  123.  exit(0);
  124. }
  125. if ( rpm_check( reference:"glibc-static-devel-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  126. {
  127.  security_hole(0);
  128.  exit(0);
  129. }
  130. if ( rpm_check( reference:"glibc-utils-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  131. {
  132.  security_hole(0);
  133.  exit(0);
  134. }
  135. if ( rpm_check( reference:"ldconfig-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  136. {
  137.  security_hole(0);
  138.  exit(0);
  139. }
  140. if ( rpm_check( reference:"nscd-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  141. {
  142.  security_hole(0);
  143.  exit(0);
  144. }
  145. if ( rpm_check( reference:"timezone-2.3.1-10.1.91mdk", release:"MDK9.1", yank:"mdk") )
  146. {
  147.  security_hole(0);
  148.  exit(0);
  149. }
  150. if (rpm_exists(rpm:"glibc-", release:"MDK9.0")
  151.  || rpm_exists(rpm:"glibc-", release:"MDK9.1") )
  152. {
  153.  set_kb_item(name:"CAN-2003-0689", value:TRUE);
  154. }
  155.