home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2004-092.nasl < prev    next >
Text File  |  2005-01-14  |  3KB  |  120 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2004:092
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(14723);
  12.  script_version ("$Revision: 1.1 $");
  13.  script_cve_id("CAN-2004-0807", "CAN-2004-0808");
  14.  
  15.  name["english"] = "MDKSA-2004:092: samba";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2004:092 (samba).
  21.  
  22.  
  23. Two vulnerabilities were discovered in samba 3.0.x; the first is a defect in
  24. smbd's ASN.1 parsing that allows an attacker to send a specially crafted packet
  25. during the authentication request which will send the newly spawned smbd process
  26. into an infinite loop. As a result, it is possible to use up all available
  27. memory on the server.
  28. The second vulnerability is in nmbd's processing of mailslot packets which could
  29. allow an attacker to anonymously crash nmbd.
  30. The provided packages are patched to protect against these two vulnerabilities.
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:092
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the samba package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"libsmbclient0-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"libsmbclient0-devel-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"nss_wins-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if ( rpm_check( reference:"samba-client-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  71. {
  72.  security_hole(0);
  73.  exit(0);
  74. }
  75. if ( rpm_check( reference:"samba-common-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  76. {
  77.  security_hole(0);
  78.  exit(0);
  79. }
  80. if ( rpm_check( reference:"samba-doc-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  81. {
  82.  security_hole(0);
  83.  exit(0);
  84. }
  85. if ( rpm_check( reference:"samba-passdb-mysql-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  86. {
  87.  security_hole(0);
  88.  exit(0);
  89. }
  90. if ( rpm_check( reference:"samba-passdb-pgsql-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  91. {
  92.  security_hole(0);
  93.  exit(0);
  94. }
  95. if ( rpm_check( reference:"samba-passdb-xml-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  96. {
  97.  security_hole(0);
  98.  exit(0);
  99. }
  100. if ( rpm_check( reference:"samba-server-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  101. {
  102.  security_hole(0);
  103.  exit(0);
  104. }
  105. if ( rpm_check( reference:"samba-swat-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  106. {
  107.  security_hole(0);
  108.  exit(0);
  109. }
  110. if ( rpm_check( reference:"samba-winbind-3.0.6-4.1.100mdk", release:"MDK10.0", yank:"mdk") )
  111. {
  112.  security_hole(0);
  113.  exit(0);
  114. }
  115. if (rpm_exists(rpm:"samba-", release:"MDK10.0") )
  116. {
  117.  set_kb_item(name:"CAN-2004-0807", value:TRUE);
  118.  set_kb_item(name:"CAN-2004-0808", value:TRUE);
  119. }
  120.