home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / redhat-RHSA-2004-651.nasl < prev    next >
Text File  |  2005-01-14  |  4KB  |  104 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. #
  5. # The text of this plugin is (C) Red Hat Inc.
  6.  
  7. if ( ! defined_func("bn_random") ) exit(0);
  8. if(description)
  9. {
  10.  script_id(15947);
  11.  script_version ("$Revision: 1.1 $");
  12.  script_cve_id("CAN-2004-1025", "CAN-2004-1026");
  13.  
  14.  name["english"] = "RHSA-2004-651: imlib";
  15.  
  16.  script_name(english:name["english"]);
  17.  
  18.  desc["english"] = '
  19.                                                                                
  20.   Updated imlib packages that fix several integer and buffer overflows are     
  21.   now available.                                                               
  22.                                                                                
  23.   The imlib packages contain an image loading and rendering library.           
  24.                                                                                
  25.   Pavel Kankovsky discovered several heap overflow flaws that were found in    
  26.   the imlib image handler. An attacker could create a carefully crafted image  
  27.   file in such a way that it could cause an application linked with imlib to   
  28.   execute arbitrary code when the file was opened by a victim. The Common      
  29.   Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name  
  30.   CAN-2004-1025 to this issue.                                                 
  31.                                                                                
  32.   Additionally, Pavel discovered several integer overflow flaws that were      
  33.   found in the imlib image handler. An attacker could create a carefully       
  34.   crafted image file in such a way that it could cause an application linked   
  35.   with imlib to execute arbitrary code or crash when the file was opened by a  
  36.   victim. The Common Vulnerabilities and Exposures project (cve.mitre.org)     
  37.   has assigned the name CAN-2004-1026 to this issue.                           
  38.                                                                                
  39.   Users of imlib should update to these updated packages, which contain        
  40.   backported patches and are not vulnerable to this issue.                     
  41.                                                                                
  42.                                                                                
  43.  
  44.  
  45. Solution : http://rhn.redhat.com/errata/RHSA-2004-651.html
  46. Risk factor : High';
  47.  
  48.  script_description(english:desc["english"]);
  49.  
  50.  summary["english"] = "Check for the version of the imlib packages";
  51.  script_summary(english:summary["english"]);
  52.  
  53.  script_category(ACT_GATHER_INFO);
  54.  
  55.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  56.  family["english"] = "Red Hat Local Security Checks";
  57.  script_family(english:family["english"]);
  58.  
  59.  script_dependencies("ssh_get_info.nasl");
  60.  
  61.  script_require_keys("Host/RedHat/rpm-list");
  62.  exit(0);
  63. }
  64.  
  65. include("rpm.inc");
  66. if ( rpm_check( reference:"imlib-1.9.13-4.3", release:"RHEL2.1") )
  67. {
  68.  security_hole(0);
  69.  exit(0);
  70. }
  71. if ( rpm_check( reference:"imlib-cfgeditor-1.9.13-4.3", release:"RHEL2.1") )
  72. {
  73.  security_hole(0);
  74.  exit(0);
  75. }
  76. if ( rpm_check( reference:"imlib-devel-1.9.13-4.3", release:"RHEL2.1") )
  77. {
  78.  security_hole(0);
  79.  exit(0);
  80. }
  81. if ( rpm_check( reference:"imlib-1.9.13-13.4", release:"RHEL3") )
  82. {
  83.  security_hole(0);
  84.  exit(0);
  85. }
  86. if ( rpm_check( reference:"imlib-devel-1.9.13-13.4", release:"RHEL3") )
  87. {
  88.  security_hole(0);
  89.  exit(0);
  90. }
  91.  
  92. if ( rpm_exists(rpm:"imlib-", release:"RHEL2.1") )
  93. {
  94.  set_kb_item(name:"CAN-2004-1025", value:TRUE);
  95.  set_kb_item(name:"CAN-2004-1026", value:TRUE);
  96. }
  97. if ( rpm_exists(rpm:"imlib-", release:"RHEL3") )
  98. {
  99.  set_kb_item(name:"CAN-2004-1025", value:TRUE);
  100.  set_kb_item(name:"CAN-2004-1026", value:TRUE);
  101. }
  102.  
  103. set_kb_item(name:"RHSA-2004-651", value:TRUE);
  104.