home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2004-144.nasl < prev    next >
Text File  |  2005-01-14  |  2KB  |  76 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2004:144
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(15917);
  12.  script_version ("$Revision: 1.1 $");
  13.  script_cve_id("CAN-2004-0972");
  14.  
  15.  name["english"] = "MDKSA-2004:144: lvm";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2004:144 (lvm).
  21.  
  22.  
  23.  
  24. The Trustix developers discovered that the lvmcreate_initrd script, part of the
  25. lvm1 package, created a temporary directory in an insecure manner. This could
  26. allow for a symlink attack to create or overwrite arbitrary files with the
  27. privileges of the user running the script.
  28.  
  29. The updated packages have been patched to prevent this problem.
  30.  
  31.  
  32.  
  33. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:144
  34. Risk factor : High";
  35.  
  36.  
  37.  
  38.  script_description(english:desc["english"]);
  39.  
  40.  summary["english"] = "Check for the version of the lvm package";
  41.  script_summary(english:summary["english"]);
  42.  
  43.  script_category(ACT_GATHER_INFO);
  44.  
  45.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  46.  family["english"] = "Mandrake Local Security Checks";
  47.  script_family(english:family["english"]);
  48.  
  49.  script_dependencies("ssh_get_info.nasl");
  50.  script_require_keys("Host/Mandrake/rpm-list");
  51.  exit(0);
  52. }
  53.  
  54. include("rpm.inc");
  55. if ( rpm_check( reference:"lvm1-1.0.8-3.1.100mdk", release:"MDK10.0", yank:"mdk") )
  56. {
  57.  security_hole(0);
  58.  exit(0);
  59. }
  60. if ( rpm_check( reference:"lvm1-1.0.8-3.1.101mdk", release:"MDK10.1", yank:"mdk") )
  61. {
  62.  security_hole(0);
  63.  exit(0);
  64. }
  65. if ( rpm_check( reference:"lvm-1.0.7-2.1.92mdk", release:"MDK9.2", yank:"mdk") )
  66. {
  67.  security_hole(0);
  68.  exit(0);
  69. }
  70. if (rpm_exists(rpm:"lvm-", release:"MDK10.0")
  71.  || rpm_exists(rpm:"lvm-", release:"MDK10.1")
  72.  || rpm_exists(rpm:"lvm-", release:"MDK9.2") )
  73. {
  74.  set_kb_item(name:"CAN-2004-0972", value:TRUE);
  75. }
  76.