home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2004-131.nasl < prev    next >
Text File  |  2005-01-14  |  5KB  |  202 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2004:131
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(15699);
  12.  script_version ("$Revision: 1.1 $");
  13.  script_cve_id("CAN-2004-0930");
  14.  
  15.  name["english"] = "MDKSA-2004:131: samba";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2004:131 (samba).
  21.  
  22.  
  23.  
  24. Karol Wiesek discovered a bug in the input validation routines in Samba 3.x
  25. used to match filename strings containing wildcard characters. This bug may
  26. allow a user to consume more than normal amounts of CPU cycles which would
  27. impact the performance and response of the server. In some cases it could also
  28. cause the server to become entirely unresponsive.
  29.  
  30. The updated packages are patched to prevent this problem with patches from the
  31. Samba team. This vulnerability is fixed in samba 3.0.8.
  32.  
  33.  
  34.  
  35. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:131
  36. Risk factor : High";
  37.  
  38.  
  39.  
  40.  script_description(english:desc["english"]);
  41.  
  42.  summary["english"] = "Check for the version of the samba package";
  43.  script_summary(english:summary["english"]);
  44.  
  45.  script_category(ACT_GATHER_INFO);
  46.  
  47.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  48.  family["english"] = "Mandrake Local Security Checks";
  49.  script_family(english:family["english"]);
  50.  
  51.  script_dependencies("ssh_get_info.nasl");
  52.  script_require_keys("Host/Mandrake/rpm-list");
  53.  exit(0);
  54. }
  55.  
  56. include("rpm.inc");
  57. if ( rpm_check( reference:"libsmbclient0-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  58. {
  59.  security_hole(0);
  60.  exit(0);
  61. }
  62. if ( rpm_check( reference:"libsmbclient0-devel-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  63. {
  64.  security_hole(0);
  65.  exit(0);
  66. }
  67. if ( rpm_check( reference:"libsmbclient0-static-devel-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  68. {
  69.  security_hole(0);
  70.  exit(0);
  71. }
  72. if ( rpm_check( reference:"nss_wins-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  73. {
  74.  security_hole(0);
  75.  exit(0);
  76. }
  77. if ( rpm_check( reference:"samba-client-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  78. {
  79.  security_hole(0);
  80.  exit(0);
  81. }
  82. if ( rpm_check( reference:"samba-common-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  83. {
  84.  security_hole(0);
  85.  exit(0);
  86. }
  87. if ( rpm_check( reference:"samba-doc-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  88. {
  89.  security_hole(0);
  90.  exit(0);
  91. }
  92. if ( rpm_check( reference:"samba-passdb-mysql-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  93. {
  94.  security_hole(0);
  95.  exit(0);
  96. }
  97. if ( rpm_check( reference:"samba-passdb-pgsql-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  98. {
  99.  security_hole(0);
  100.  exit(0);
  101. }
  102. if ( rpm_check( reference:"samba-passdb-xml-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  103. {
  104.  security_hole(0);
  105.  exit(0);
  106. }
  107. if ( rpm_check( reference:"samba-server-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  108. {
  109.  security_hole(0);
  110.  exit(0);
  111. }
  112. if ( rpm_check( reference:"samba-swat-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  113. {
  114.  security_hole(0);
  115.  exit(0);
  116. }
  117. if ( rpm_check( reference:"samba-winbind-3.0.6-4.2.100mdk", release:"MDK10.0", yank:"mdk") )
  118. {
  119.  security_hole(0);
  120.  exit(0);
  121. }
  122. if ( rpm_check( reference:"libsmbclient0-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  123. {
  124.  security_hole(0);
  125.  exit(0);
  126. }
  127. if ( rpm_check( reference:"libsmbclient0-devel-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  128. {
  129.  security_hole(0);
  130.  exit(0);
  131. }
  132. if ( rpm_check( reference:"libsmbclient0-static-devel-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  133. {
  134.  security_hole(0);
  135.  exit(0);
  136. }
  137. if ( rpm_check( reference:"nss_wins-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  138. {
  139.  security_hole(0);
  140.  exit(0);
  141. }
  142. if ( rpm_check( reference:"samba-client-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  143. {
  144.  security_hole(0);
  145.  exit(0);
  146. }
  147. if ( rpm_check( reference:"samba-common-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  148. {
  149.  security_hole(0);
  150.  exit(0);
  151. }
  152. if ( rpm_check( reference:"samba-doc-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  153. {
  154.  security_hole(0);
  155.  exit(0);
  156. }
  157. if ( rpm_check( reference:"samba-passdb-mysql-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  158. {
  159.  security_hole(0);
  160.  exit(0);
  161. }
  162. if ( rpm_check( reference:"samba-passdb-pgsql-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  163. {
  164.  security_hole(0);
  165.  exit(0);
  166. }
  167. if ( rpm_check( reference:"samba-passdb-xml-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  168. {
  169.  security_hole(0);
  170.  exit(0);
  171. }
  172. if ( rpm_check( reference:"samba-server-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  173. {
  174.  security_hole(0);
  175.  exit(0);
  176. }
  177. if ( rpm_check( reference:"samba-swat-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  178. {
  179.  security_hole(0);
  180.  exit(0);
  181. }
  182. if ( rpm_check( reference:"samba-vscan-clamav-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  183. {
  184.  security_hole(0);
  185.  exit(0);
  186. }
  187. if ( rpm_check( reference:"samba-vscan-icap-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  188. {
  189.  security_hole(0);
  190.  exit(0);
  191. }
  192. if ( rpm_check( reference:"samba-winbind-3.0.7-2.1.101mdk", release:"MDK10.1", yank:"mdk") )
  193. {
  194.  security_hole(0);
  195.  exit(0);
  196. }
  197. if (rpm_exists(rpm:"samba-", release:"MDK10.0")
  198.  || rpm_exists(rpm:"samba-", release:"MDK10.1") )
  199. {
  200.  set_kb_item(name:"CAN-2004-0930", value:TRUE);
  201. }
  202.