home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2004-150.nasl < prev    next >
Text File  |  2005-01-14  |  9KB  |  330 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2004:150
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(15981);
  12.  script_version ("$Revision: 1.1 $");
  13.  script_cve_id("CAN-2004-1158", "CAN-2004-1171");
  14.  
  15.  name["english"] = "MDKSA-2004:150: kdelibs";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2004:150 (kdelibs).
  21.  
  22.  
  23.  
  24. Daniel Fabian discovered a potential privacy issue in KDE. When creating a link
  25. to a remote file from various applications, including Konqueror, the resulting
  26. URL may contain the authentication credentials used to access that remote
  27. resource. This includes, but is not limited to, browsing SMB (Samba) shares.
  28. Upon further investigation, it was found that the SMB protocol handler also
  29. unnecessarily exposed authentication credentials (CAN-2004-1171).
  30.  
  31. Another vulnerability was discovered where a malicious website could abuse
  32. Konqueror to load its own content into a window or tab that was opened by a
  33. trusted website, or it could trick a trusted website into loading content into
  34. an existing window or tab. This could lead to the user being confused as to the
  35. origin of a particular webpage and could have the user unknowingly send
  36. confidential information intended for a trusted site to the malicious site
  37. (CAN-2004-1158).
  38.  
  39. The updated packages contain a patch from the KDE team to solve this issue.
  40.  
  41. Additionally, the kdelibs and kdebase packages for Mandrakelinux 10.1 contain
  42. numerous bugfixes. New qt3 packages are being provided for Mandrakelinux 10.0
  43. that are required to build the kdebase package.
  44.  
  45.  
  46.  
  47. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:150
  48. Risk factor : High";
  49.  
  50.  
  51.  
  52.  script_description(english:desc["english"]);
  53.  
  54.  summary["english"] = "Check for the version of the kdelibs package";
  55.  script_summary(english:summary["english"]);
  56.  
  57.  script_category(ACT_GATHER_INFO);
  58.  
  59.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  60.  family["english"] = "Mandrake Local Security Checks";
  61.  script_family(english:family["english"]);
  62.  
  63.  script_dependencies("ssh_get_info.nasl");
  64.  script_require_keys("Host/Mandrake/rpm-list");
  65.  exit(0);
  66. }
  67.  
  68. include("rpm.inc");
  69. if ( rpm_check( reference:"kdebase-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  70. {
  71.  security_hole(0);
  72.  exit(0);
  73. }
  74. if ( rpm_check( reference:"kdebase-common-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  75. {
  76.  security_hole(0);
  77.  exit(0);
  78. }
  79. if ( rpm_check( reference:"kdebase-kate-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  80. {
  81.  security_hole(0);
  82.  exit(0);
  83. }
  84. if ( rpm_check( reference:"kdebase-kcontrol-data-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  85. {
  86.  security_hole(0);
  87.  exit(0);
  88. }
  89. if ( rpm_check( reference:"kdebase-kdeprintfax-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  90. {
  91.  security_hole(0);
  92.  exit(0);
  93. }
  94. if ( rpm_check( reference:"kdebase-kdm-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  95. {
  96.  security_hole(0);
  97.  exit(0);
  98. }
  99. if ( rpm_check( reference:"kdebase-kdm-config-file-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  100. {
  101.  security_hole(0);
  102.  exit(0);
  103. }
  104. if ( rpm_check( reference:"kdebase-kmenuedit-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  105. {
  106.  security_hole(0);
  107.  exit(0);
  108. }
  109. if ( rpm_check( reference:"kdebase-konsole-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  110. {
  111.  security_hole(0);
  112.  exit(0);
  113. }
  114. if ( rpm_check( reference:"kdebase-nsplugins-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  115. {
  116.  security_hole(0);
  117.  exit(0);
  118. }
  119. if ( rpm_check( reference:"kdebase-progs-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  120. {
  121.  security_hole(0);
  122.  exit(0);
  123. }
  124. if ( rpm_check( reference:"kdelibs-common-3.2-36.6.100mdk", release:"MDK10.0", yank:"mdk") )
  125. {
  126.  security_hole(0);
  127.  exit(0);
  128. }
  129. if ( rpm_check( reference:"libkdebase4-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  130. {
  131.  security_hole(0);
  132.  exit(0);
  133. }
  134. if ( rpm_check( reference:"libkdebase4-devel-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  135. {
  136.  security_hole(0);
  137.  exit(0);
  138. }
  139. if ( rpm_check( reference:"libkdebase4-kate-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  140. {
  141.  security_hole(0);
  142.  exit(0);
  143. }
  144. if ( rpm_check( reference:"libkdebase4-kate-devel-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  145. {
  146.  security_hole(0);
  147.  exit(0);
  148. }
  149. if ( rpm_check( reference:"libkdebase4-kmenuedit-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  150. {
  151.  security_hole(0);
  152.  exit(0);
  153. }
  154. if ( rpm_check( reference:"libkdebase4-konsole-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  155. {
  156.  security_hole(0);
  157.  exit(0);
  158. }
  159. if ( rpm_check( reference:"libkdebase4-nsplugins-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  160. {
  161.  security_hole(0);
  162.  exit(0);
  163. }
  164. if ( rpm_check( reference:"libkdebase4-nsplugins-devel-3.2-79.14.100mdk", release:"MDK10.0", yank:"mdk") )
  165. {
  166.  security_hole(0);
  167.  exit(0);
  168. }
  169. if ( rpm_check( reference:"libkdecore4-3.2-36.6.100mdk", release:"MDK10.0", yank:"mdk") )
  170. {
  171.  security_hole(0);
  172.  exit(0);
  173. }
  174. if ( rpm_check( reference:"libkdecore4-devel-3.2-36.6.100mdk", release:"MDK10.0", yank:"mdk") )
  175. {
  176.  security_hole(0);
  177.  exit(0);
  178. }
  179. if ( rpm_check( reference:"mandrakelinux-kde-config-file-10.1-6.1.100mdk", release:"MDK10.0", yank:"mdk") )
  180. {
  181.  security_hole(0);
  182.  exit(0);
  183. }
  184. if ( rpm_check( reference:"libqt3-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  185. {
  186.  security_hole(0);
  187.  exit(0);
  188. }
  189. if ( rpm_check( reference:"libqt3-devel-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  190. {
  191.  security_hole(0);
  192.  exit(0);
  193. }
  194. if ( rpm_check( reference:"libqt3-mysql-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  195. {
  196.  security_hole(0);
  197.  exit(0);
  198. }
  199. if ( rpm_check( reference:"libqt3-odbc-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  200. {
  201.  security_hole(0);
  202.  exit(0);
  203. }
  204. if ( rpm_check( reference:"libqt3-psql-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  205. {
  206.  security_hole(0);
  207.  exit(0);
  208. }
  209. if ( rpm_check( reference:"qt3-common-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  210. {
  211.  security_hole(0);
  212.  exit(0);
  213. }
  214. if ( rpm_check( reference:"qt3-example-3.2.3-19.5.100mdk", release:"MDK10.0", yank:"mdk") )
  215. {
  216.  security_hole(0);
  217.  exit(0);
  218. }
  219. if ( rpm_check( reference:"kdebase-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  220. {
  221.  security_hole(0);
  222.  exit(0);
  223. }
  224. if ( rpm_check( reference:"kdebase-common-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  225. {
  226.  security_hole(0);
  227.  exit(0);
  228. }
  229. if ( rpm_check( reference:"kdebase-kate-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  230. {
  231.  security_hole(0);
  232.  exit(0);
  233. }
  234. if ( rpm_check( reference:"kdebase-kcontrol-data-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  235. {
  236.  security_hole(0);
  237.  exit(0);
  238. }
  239. if ( rpm_check( reference:"kdebase-kcontrol-nsplugins-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  240. {
  241.  security_hole(0);
  242.  exit(0);
  243. }
  244. if ( rpm_check( reference:"kdebase-kdeprintfax-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  245. {
  246.  security_hole(0);
  247.  exit(0);
  248. }
  249. if ( rpm_check( reference:"kdebase-kdm-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  250. {
  251.  security_hole(0);
  252.  exit(0);
  253. }
  254. if ( rpm_check( reference:"kdebase-kdm-config-file-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  255. {
  256.  security_hole(0);
  257.  exit(0);
  258. }
  259. if ( rpm_check( reference:"kdebase-kmenuedit-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  260. {
  261.  security_hole(0);
  262.  exit(0);
  263. }
  264. if ( rpm_check( reference:"kdebase-konsole-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  265. {
  266.  security_hole(0);
  267.  exit(0);
  268. }
  269. if ( rpm_check( reference:"kdebase-nsplugins-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  270. {
  271.  security_hole(0);
  272.  exit(0);
  273. }
  274. if ( rpm_check( reference:"kdebase-progs-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  275. {
  276.  security_hole(0);
  277.  exit(0);
  278. }
  279. if ( rpm_check( reference:"kdelibs-common-3.2.3-98.1.101mdk", release:"MDK10.1", yank:"mdk") )
  280. {
  281.  security_hole(0);
  282.  exit(0);
  283. }
  284. if ( rpm_check( reference:"libkdebase4-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  285. {
  286.  security_hole(0);
  287.  exit(0);
  288. }
  289. if ( rpm_check( reference:"libkdebase4-devel-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  290. {
  291.  security_hole(0);
  292.  exit(0);
  293. }
  294. if ( rpm_check( reference:"libkdebase4-kate-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  295. {
  296.  security_hole(0);
  297.  exit(0);
  298. }
  299. if ( rpm_check( reference:"libkdebase4-kate-devel-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  300. {
  301.  security_hole(0);
  302.  exit(0);
  303. }
  304. if ( rpm_check( reference:"libkdebase4-kmenuedit-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  305. {
  306.  security_hole(0);
  307.  exit(0);
  308. }
  309. if ( rpm_check( reference:"libkdebase4-konsole-3.2.3-134.3.101mdk", release:"MDK10.1", yank:"mdk") )
  310. {
  311.  security_hole(0);
  312.  exit(0);
  313. }
  314. if ( rpm_check( reference:"libkdecore4-3.2.3-98.1.101mdk", release:"MDK10.1", yank:"mdk") )
  315. {
  316.  security_hole(0);
  317.  exit(0);
  318. }
  319. if ( rpm_check( reference:"libkdecore4-devel-3.2.3-98.1.101mdk", release:"MDK10.1", yank:"mdk") )
  320. {
  321.  security_hole(0);
  322.  exit(0);
  323. }
  324. if (rpm_exists(rpm:"kdelibs-", release:"MDK10.0")
  325.  || rpm_exists(rpm:"kdelibs-", release:"MDK10.1") )
  326. {
  327.  set_kb_item(name:"CAN-2004-1158", value:TRUE);
  328.  set_kb_item(name:"CAN-2004-1171", value:TRUE);
  329. }
  330.