ID AIX_U810489.NASL
Type nessus
Reporter This script is Copyright (C) 2007-2021 Tenable Network Security, Inc.
Modified 2007-12-03T00:00:00
Description
The remote host is missing AIX PTF U810489, which is related to the
security of the package bos.rte.console.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were extracted
# from AIX Security PTF U810489. The text itself is copyright (C)
# International Business Machines Corp.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(28902);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/04");
script_cve_id("CVE-2007-0978");
script_name(english:"AIX 5.3 TL 5 / 5.3 TL 6 : bos.rte.console (U810489)");
script_summary(english:"Check for PTF U810489");
script_set_attribute(
attribute:"synopsis",
value:"The remote AIX host is missing a vendor-supplied security patch."
);
script_set_attribute(
attribute:"description",
value:
"The remote host is missing AIX PTF U810489, which is related to the
security of the package bos.rte.console."
);
script_set_attribute(
attribute:"see_also",
value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY94901"
);
script_set_attribute(
attribute:"solution",
value:"Install the appropriate missing security-related fix."
);
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.3");
script_set_attribute(attribute:"vuln_publication_date", value:"2007/02/14");
script_set_attribute(attribute:"patch_publication_date", value:"2007/02/14");
script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/03");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2007-2021 Tenable Network Security, Inc.");
script_family(english:"AIX Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("aix.inc");
if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX");
if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING);
flag = 0;
if ( aix_check_patch(ml:"530005", patch:"U810489", package:"bos.rte.console.5.3.0.51") < 0 ) flag++;
if ( aix_check_patch(ml:"530006", patch:"U810489", package:"bos.rte.console.5.3.0.51") < 0 ) flag++;
if (flag)
{
if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get());
else security_hole(0);
exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");
{"id": "AIX_U810489.NASL", "bulletinFamily": "scanner", "title": "AIX 5.3 TL 5 / 5.3 TL 6 : bos.rte.console (U810489)", "description": "The remote host is missing AIX PTF U810489, which is related to the\nsecurity of the package bos.rte.console.", "published": "2007-12-03T00:00:00", "modified": "2007-12-03T00:00:00", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}, "href": "https://www.tenable.com/plugins/nessus/28902", "reporter": "This script is Copyright (C) 2007-2021 Tenable Network Security, Inc.", "references": ["http://www-01.ibm.com/support/docview.wss?uid=isg1IY94901"], "cvelist": ["CVE-2007-0978"], "type": "nessus", "lastseen": "2021-01-06T09:18:02", "edition": 23, "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-0978"]}, {"type": "osvdb", "idList": ["OSVDB:33200"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:7260"]}], "modified": "2021-01-06T09:18:02", "rev": 2}, "score": {"value": 6.6, "vector": "NONE", "modified": "2021-01-06T09:18:02", "rev": 2}, "vulnersScore": 6.6}, "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were extracted\n# from AIX Security PTF U810489. The text itself is copyright (C)\n# International Business Machines Corp.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(28902);\n script_version(\"1.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2007-0978\");\n\n script_name(english:\"AIX 5.3 TL 5 / 5.3 TL 6 : bos.rte.console (U810489)\");\n script_summary(english:\"Check for PTF U810489\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote AIX host is missing a vendor-supplied security patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is missing AIX PTF U810489, which is related to the\nsecurity of the package bos.rte.console.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www-01.ibm.com/support/docview.wss?uid=isg1IY94901\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Install the appropriate missing security-related fix.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:ibm:aix:5.3\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2007/02/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2007/02/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2007/12/03\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2007-2021 Tenable Network Security, Inc.\");\n script_family(english:\"AIX Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/AIX/oslevel\", \"Host/AIX/version\", \"Host/AIX/lslpp\");\n\n exit(0);\n}\n\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"aix.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif ( ! get_kb_item(\"Host/AIX/version\") ) audit(AUDIT_OS_NOT, \"AIX\");\nif ( ! get_kb_item(\"Host/AIX/lslpp\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nflag = 0;\n\nif ( aix_check_patch(ml:\"530005\", patch:\"U810489\", package:\"bos.rte.console.5.3.0.51\") < 0 ) flag++;\nif ( aix_check_patch(ml:\"530006\", patch:\"U810489\", package:\"bos.rte.console.5.3.0.51\") < 0 ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "naslFamily": "AIX Local Security Checks", "pluginID": "28902", "cpe": ["cpe:/o:ibm:aix:5.3"], "scheme": null}
{"cve": [{"lastseen": "2020-10-03T11:45:49", "description": "Buffer overflow in swcons in IBM AIX 5.3 allows local users to gain privileges via long input data.", "edition": 3, "cvss3": {}, "published": "2007-02-16T01:28:00", "title": "CVE-2007-0978", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": true, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-0978"], "modified": "2017-07-29T01:30:00", "cpe": ["cpe:/o:ibm:aix:5.3"], "id": "CVE-2007-0978", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-0978", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:29", "bulletinFamily": "software", "cvelist": ["CVE-2007-0978"], "description": "# No description provided by the source\n\n## References:\n[Vendor Specific Advisory URL](http://www-1.ibm.com/support/docview.wss?uid=isg1IY94901)\nSecurity Tracker: 1017656\n[Secunia Advisory ID:24154](https://secuniaresearch.flexerasoftware.com/advisories/24154/)\nISS X-Force ID: 32508\nFrSIRT Advisory: ADV-2007-0617\n[CVE-2007-0978](https://vulners.com/cve/CVE-2007-0978)\n", "edition": 1, "modified": "2007-02-15T08:49:33", "published": "2007-02-15T08:49:33", "href": "https://vulners.com/osvdb/OSVDB:33200", "id": "OSVDB:33200", "title": "AIX swcons Command Local Overflow", "type": "osvdb", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "securityvulns": [{"lastseen": "2018-08-31T11:09:23", "bulletinFamily": "software", "cvelist": ["CVE-2007-0978"], "description": "No description provided", "edition": 1, "modified": "2007-02-18T00:00:00", "published": "2007-02-18T00:00:00", "id": "SECURITYVULNS:VULN:7260", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:7260", "title": "IBM AIX buffer overflow", "type": "securityvulns", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}