home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2004-085.nasl < prev    next >
Text File  |  2005-01-14  |  4KB  |  132 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2004:085
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(14334);
  12.  script_version ("$Revision: 1.2 $");
  13.  script_cve_id("CAN-2004-0691", "CAN-2004-0692", "CAN-2004-0693");
  14.  
  15.  name["english"] = "MDKSA-2004:085: qt3";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2004:085 (qt3).
  21.  
  22.  
  23. Chris Evans discovered a heap-based overflow in the QT library when handling
  24. 8-bit RLE encoded BMP files. This vulnerability could allow for the compromise
  25. of the account used to view or browse malicious BMP files. On subsequent
  26. investigation, it was also found that the handlers for XPM, GIF, and JPEG image
  27. types were also faulty.
  28. These problems affect all applications that use QT to handle image files, such
  29. as QT-based image viewers, the Konqueror web browser, and others.
  30. The updated packages have been patched to correct these problems.
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:085
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the qt3 package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"libqt3-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"libqt3-devel-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"libqt3-mysql-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if ( rpm_check( reference:"libqt3-odbc-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  71. {
  72.  security_hole(0);
  73.  exit(0);
  74. }
  75. if ( rpm_check( reference:"libqt3-psql-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  76. {
  77.  security_hole(0);
  78.  exit(0);
  79. }
  80. if ( rpm_check( reference:"qt3-common-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  81. {
  82.  security_hole(0);
  83.  exit(0);
  84. }
  85. if ( rpm_check( reference:"qt3-example-3.2.3-19.2.100mdk", release:"MDK10.0", yank:"mdk") )
  86. {
  87.  security_hole(0);
  88.  exit(0);
  89. }
  90. if ( rpm_check( reference:"libqt3-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  91. {
  92.  security_hole(0);
  93.  exit(0);
  94. }
  95. if ( rpm_check( reference:"libqt3-devel-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  96. {
  97.  security_hole(0);
  98.  exit(0);
  99. }
  100. if ( rpm_check( reference:"libqt3-mysql-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  101. {
  102.  security_hole(0);
  103.  exit(0);
  104. }
  105. if ( rpm_check( reference:"libqt3-odbc-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  106. {
  107.  security_hole(0);
  108.  exit(0);
  109. }
  110. if ( rpm_check( reference:"libqt3-psql-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  111. {
  112.  security_hole(0);
  113.  exit(0);
  114. }
  115. if ( rpm_check( reference:"qt3-common-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  116. {
  117.  security_hole(0);
  118.  exit(0);
  119. }
  120. if ( rpm_check( reference:"qt3-example-3.1.2-15.4.92mdk", release:"MDK9.2", yank:"mdk") )
  121. {
  122.  security_hole(0);
  123.  exit(0);
  124. }
  125. if (rpm_exists(rpm:"qt3-", release:"MDK10.0")
  126.  || rpm_exists(rpm:"qt3-", release:"MDK9.2") )
  127. {
  128.  set_kb_item(name:"CAN-2004-0691", value:TRUE);
  129.  set_kb_item(name:"CAN-2004-0692", value:TRUE);
  130.  set_kb_item(name:"CAN-2004-0693", value:TRUE);
  131. }
  132.