home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / redhat-RHSA-2004-537.nasl < prev    next >
Text File  |  2005-01-14  |  4KB  |  102 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. #
  5. # The text of this plugin is (C) Red Hat Inc.
  6.  
  7. if ( ! defined_func("bn_random") ) exit(0);
  8. if(description)
  9. {
  10.  script_id(15943);
  11.  script_version ("$Revision: 1.1 $");
  12.  script_cve_id("CAN-2004-0687", "CAN-2004-0688", "CAN-2004-0914");
  13.  
  14.  name["english"] = "RHSA-2004-537: openmotif";
  15.  
  16.  script_name(english:name["english"]);
  17.  
  18.  desc["english"] = '
  19.                                                                                     
  20.   Updated openmotif packages that fix flaws in the Xpm image library are now        
  21.   available.                                                                        
  22.                                                                                     
  23.   OpenMotif provides libraries which implement the Motif industry standard          
  24.   graphical user interface.                                                         
  25.                                                                                     
  26.   During a source code audit, Chris Evans and others discovered several stack       
  27.   overflow flaws and an integer overflow flaw in the libXpm library used to         
  28.   decode XPM (X PixMap) images. A vulnerable version of this library was            
  29.   found within OpenMotif. An attacker could create a carefully crafted              
  30.   XPM file which would cause an application to crash or potentially execute         
  31.   arbitrary code if opened by a victim. The Common Vulnerabilities and              
  32.   Exposures project (cve.mitre.org) has assigned the names                          
  33.   CAN-2004-0687, CAN-2004-0688, and CAN-2004-0914 to these issues.                  
  34.                                                                                     
  35.   Users of OpenMotif are advised to upgrade to these erratum packages, which        
  36.   contain backported security patches to the embedded libXpm library.               
  37.                                                                                     
  38.                                                                                     
  39.  
  40.  
  41. Solution : http://rhn.redhat.com/errata/RHSA-2004-537.html
  42. Risk factor : High';
  43.  
  44.  script_description(english:desc["english"]);
  45.  
  46.  summary["english"] = "Check for the version of the openmotif packages";
  47.  script_summary(english:summary["english"]);
  48.  
  49.  script_category(ACT_GATHER_INFO);
  50.  
  51.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  52.  family["english"] = "Red Hat Local Security Checks";
  53.  script_family(english:family["english"]);
  54.  
  55.  script_dependencies("ssh_get_info.nasl");
  56.  
  57.  script_require_keys("Host/RedHat/rpm-list");
  58.  exit(0);
  59. }
  60.  
  61. include("rpm.inc");
  62. if ( rpm_check( reference:"openmotif-2.1.30-13.21AS.4", release:"RHEL2.1") )
  63. {
  64.  security_hole(0);
  65.  exit(0);
  66. }
  67. if ( rpm_check( reference:"openmotif-devel-2.1.30-13.21AS.4", release:"RHEL2.1") )
  68. {
  69.  security_hole(0);
  70.  exit(0);
  71. }
  72. if ( rpm_check( reference:"openmotif-2.2.3-4.RHEL3.4", release:"RHEL3") )
  73. {
  74.  security_hole(0);
  75.  exit(0);
  76. }
  77. if ( rpm_check( reference:"openmotif-devel-2.2.3-4.RHEL3.4", release:"RHEL3") )
  78. {
  79.  security_hole(0);
  80.  exit(0);
  81. }
  82. if ( rpm_check( reference:"openmotif21-2.1.30-9.RHEL3.4", release:"RHEL3") )
  83. {
  84.  security_hole(0);
  85.  exit(0);
  86. }
  87.  
  88. if ( rpm_exists(rpm:"openmotif-", release:"RHEL2.1") )
  89. {
  90.  set_kb_item(name:"CAN-2004-0687", value:TRUE);
  91.  set_kb_item(name:"CAN-2004-0688", value:TRUE);
  92.  set_kb_item(name:"CAN-2004-0914", value:TRUE);
  93. }
  94. if ( rpm_exists(rpm:"openmotif-", release:"RHEL3") )
  95. {
  96.  set_kb_item(name:"CAN-2004-0687", value:TRUE);
  97.  set_kb_item(name:"CAN-2004-0688", value:TRUE);
  98.  set_kb_item(name:"CAN-2004-0914", value:TRUE);
  99. }
  100.  
  101. set_kb_item(name:"RHSA-2004-537", value:TRUE);
  102.