Fedora 7 : kernel-2.6.22.4-65.fc7 (2007-1785)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2007-1785.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(27734);
  script_version("1.14");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");

  script_cve_id("CVE-2007-3848");
  script_xref(name:"FEDORA", value:"2007-1785");

  script_name(english:"Fedora 7 : kernel-2.6.22.4-65.fc7 (2007-1785)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Update to kernel 2.6.22.2, 2.6.22.3 and 2.6.22.4:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.3
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4

  - Fix failure to find serial ports on some machines.

    - Detect broken timers on some AMD dual-core machines:
      fixes hangs and failure to boot.

  - Don't crash when a userspace driver requests too much
    memory.

    - Update the CFS scheduler to more closely match
      upstream.

    - Wireless driver update.

    - Enable ACPI_DEBUG in -debug builds.

    - Fix e820 memory hole sizing on x86_64.

    - Add four bugfixes for sky2 ethernet.

    - Fix some SCSI async scanning bugs.

    - Fix polling in r8169 driver.

    - Fix wrong sensor values with some chips.

CVE-2007-3848: Linux kernel 2.4.35 and other versions allows local
users to send arbitrary signals to a child process that is running at
higher privileges by causing a setuid-root parent process to die,
which delivers an attacker-controlled parent process death signal
(PR_SET_PDEATHSIG).

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  # http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?e81b5005"
  );
  # http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.3
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?898c6269"
  );
  # http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?3bf7926d"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2007-August/003400.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?87df7cb8"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-PAE");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-PAE-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-PAE-debug-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-PAE-debug-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-PAE-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-PAE-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-debug-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-debug-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-debuginfo-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:kernel-headers");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:7");

  script_set_attribute(attribute:"patch_publication_date", value:"2007/08/23");
  script_set_attribute(attribute:"plugin_publication_date", value:"2007/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2007-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 7.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC7", reference:"kernel-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-PAE-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-PAE-debug-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-PAE-debug-debuginfo-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-PAE-debug-devel-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-PAE-debuginfo-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-PAE-devel-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-debug-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-debug-debuginfo-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-debug-devel-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-debuginfo-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-debuginfo-common-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-devel-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-doc-2.6.22.4-65.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"kernel-headers-2.6.22.4-65.fc7")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "kernel / kernel-PAE / kernel-PAE-debug / kernel-PAE-debug-debuginfo / etc");
}