| Reporter | Title | Published | Views | Family All 60 |
|---|---|---|---|---|
| CentOS 3 / 4 : util-linux (CESA-2007:0969) | 23 Apr 200900:00 | – | nessus | |
| Debian DSA-1449-1 : loop-aes-utils - programming error | 7 Jan 200800:00 | – | nessus | |
| Debian DSA-1450-1 : util-linux - programming error | 7 Jan 200800:00 | – | nessus | |
| Fedora 7 : util-linux-2.13-0.54.1.fc7 (2007-2462) | 6 Nov 200700:00 | – | nessus | |
| GLSA-200710-18 : util-linux: Local privilege escalation | 19 Oct 200700:00 | – | nessus | |
| Mandrake Linux Security Advisory : util-linux (MDKSA-2007:198) | 17 Oct 200700:00 | – | nessus | |
| Oracle Linux 3 / 4 : util-linux (ELSA-2007-0969) | 12 Jul 201300:00 | – | nessus | |
| RHEL 3 / 4 / 5 : util-linux (RHSA-2007:0969) | 16 Nov 200700:00 | – | nessus | |
| Scientific Linux Security Update : util-linux on SL5.x, SL4.x, SL3.x i386/x86_64 | 1 Aug 201200:00 | – | nessus | |
| openSUSE 10 Security Update : util-linux (util-linux-4552) | 18 Oct 200700:00 | – | nessus |
| Source | Link |
|---|---|
| nessus | www.nessus.org/u |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2007-722.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(27059);
script_version("1.15");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_xref(name:"FEDORA", value:"2007-722");
script_name(english:"Fedora Core 6 : util-linux-2.13-0.49.fc6 (2007-722)");
script_summary(english:"Checks rpm output for the updated packages.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora Core host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
" - Mon Oct 8 2007 Karel Zak <kzak at redhat.com> 2.13-0.49
- fix #320141 - CVE-2007-5191 util-linux (u)mount
doesn't drop privileges properly when calling helpers
[FC6]
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
# https://lists.fedoraproject.org/pipermail/package-announce/2007-October/004186.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?4e279a29"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected util-linux and / or util-linux-debuginfo packages."
);
script_set_attribute(attribute:"risk_factor", value:"High");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:util-linux");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:util-linux-debuginfo");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora_core:6");
script_set_attribute(attribute:"patch_publication_date", value:"2007/10/15");
script_set_attribute(attribute:"plugin_publication_date", value:"2007/10/16");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2007-2021 Tenable Network Security, Inc.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 6.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC6", reference:"util-linux-2.13-0.49.fc6")) flag++;
if (rpm_check(release:"FC6", reference:"util-linux-debuginfo-2.13-0.49.fc6")) flag++;
if (flag)
{
if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
else security_hole(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "util-linux / util-linux-debuginfo");
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation