home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2004-143.nasl < prev    next >
Text File  |  2005-01-14  |  3KB  |  130 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2004:143
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(15916);
  12.  script_version ("$Revision: 1.1 $");
  13.  script_cve_id("CAN-2004-0981");
  14.  
  15.  name["english"] = "MDKSA-2004:143: ImageMagick";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2004:143 (ImageMagick).
  21.  
  22.  
  23.  
  24. A vulnerability was discovered in ImageMagick where, due to a boundary error
  25. within the EXIF parsing routine, a specially crafted graphic image could
  26. potentially lead to the execution of arbitrary code.
  27.  
  28. The updated packages have been patched to prevent this problem.
  29.  
  30.  
  31.  
  32. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:143
  33. Risk factor : High";
  34.  
  35.  
  36.  
  37.  script_description(english:desc["english"]);
  38.  
  39.  summary["english"] = "Check for the version of the ImageMagick package";
  40.  script_summary(english:summary["english"]);
  41.  
  42.  script_category(ACT_GATHER_INFO);
  43.  
  44.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  45.  family["english"] = "Mandrake Local Security Checks";
  46.  script_family(english:family["english"]);
  47.  
  48.  script_dependencies("ssh_get_info.nasl");
  49.  script_require_keys("Host/Mandrake/rpm-list");
  50.  exit(0);
  51. }
  52.  
  53. include("rpm.inc");
  54. if ( rpm_check( reference:"ImageMagick-5.5.7.15-6.2.100mdk", release:"MDK10.0", yank:"mdk") )
  55. {
  56.  security_hole(0);
  57.  exit(0);
  58. }
  59. if ( rpm_check( reference:"ImageMagick-doc-5.5.7.15-6.2.100mdk", release:"MDK10.0", yank:"mdk") )
  60. {
  61.  security_hole(0);
  62.  exit(0);
  63. }
  64. if ( rpm_check( reference:"libMagick5.5.7-5.5.7.15-6.2.100mdk", release:"MDK10.0", yank:"mdk") )
  65. {
  66.  security_hole(0);
  67.  exit(0);
  68. }
  69. if ( rpm_check( reference:"libMagick5.5.7-devel-5.5.7.15-6.2.100mdk", release:"MDK10.0", yank:"mdk") )
  70. {
  71.  security_hole(0);
  72.  exit(0);
  73. }
  74. if ( rpm_check( reference:"perl-Magick-5.5.7.15-6.2.100mdk", release:"MDK10.0", yank:"mdk") )
  75. {
  76.  security_hole(0);
  77.  exit(0);
  78. }
  79. if ( rpm_check( reference:"ImageMagick-6.0.4.4-5.1.101mdk", release:"MDK10.1", yank:"mdk") )
  80. {
  81.  security_hole(0);
  82.  exit(0);
  83. }
  84. if ( rpm_check( reference:"ImageMagick-doc-6.0.4.4-5.1.101mdk", release:"MDK10.1", yank:"mdk") )
  85. {
  86.  security_hole(0);
  87.  exit(0);
  88. }
  89. if ( rpm_check( reference:"libMagick6.4.0-6.0.4.4-5.1.101mdk", release:"MDK10.1", yank:"mdk") )
  90. {
  91.  security_hole(0);
  92.  exit(0);
  93. }
  94. if ( rpm_check( reference:"libMagick6.4.0-devel-6.0.4.4-5.1.101mdk", release:"MDK10.1", yank:"mdk") )
  95. {
  96.  security_hole(0);
  97.  exit(0);
  98. }
  99. if ( rpm_check( reference:"perl-Magick-6.0.4.4-5.1.101mdk", release:"MDK10.1", yank:"mdk") )
  100. {
  101.  security_hole(0);
  102.  exit(0);
  103. }
  104. if ( rpm_check( reference:"ImageMagick-5.5.7.10-7.2.92mdk", release:"MDK9.2", yank:"mdk") )
  105. {
  106.  security_hole(0);
  107.  exit(0);
  108. }
  109. if ( rpm_check( reference:"libMagick5.5.7-5.5.7.10-7.2.92mdk", release:"MDK9.2", yank:"mdk") )
  110. {
  111.  security_hole(0);
  112.  exit(0);
  113. }
  114. if ( rpm_check( reference:"libMagick5.5.7-devel-5.5.7.10-7.2.92mdk", release:"MDK9.2", yank:"mdk") )
  115. {
  116.  security_hole(0);
  117.  exit(0);
  118. }
  119. if ( rpm_check( reference:"perl-Magick-5.5.7.10-7.2.92mdk", release:"MDK9.2", yank:"mdk") )
  120. {
  121.  security_hole(0);
  122.  exit(0);
  123. }
  124. if (rpm_exists(rpm:"ImageMagick-", release:"MDK10.0")
  125.  || rpm_exists(rpm:"ImageMagick-", release:"MDK10.1")
  126.  || rpm_exists(rpm:"ImageMagick-", release:"MDK9.2") )
  127. {
  128.  set_kb_item(name:"CAN-2004-0981", value:TRUE);
  129. }
  130.