| Source | Link |
|---|---|
| bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
| nessus | www.nessus.org/u |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2009-2823.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(39392);
script_version("1.11");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_xref(name:"FEDORA", value:"2009-2823");
script_name(english:"Fedora 10 : php-ZendFramework-1.7.7-2.fc10 (2009-2823)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
" - Tue Mar 17 2009 Alexander Kahl <akahl at iconmobile.com>
- 1.7.7-2
- bump (cannot remove spurious -1 tag)
- Tue Mar 17 2009 Alexander Kahl <akahl at
iconmobile.com> - 1.7.7-1
- update to 1.7.7
- PHPUnit dep now >= 3.3.0
- moved Ldap bindings to extra packages (php-ldap dep)
- excluded db adapters with unresolvable deps
- moved mysqli db adapter files to correct package
- support both old and new font deps using conditional
- Fri Jan 2 2009 Alexander Kahl <akahl at
iconmobile.com> - 1.7.2-1
- update to 1.7.2
- ZendX documentation doesn't need regeneration anymore,
removed deps
- Bug 477440: Use Vera fonts from Fedora's package
- Thu Nov 20 2008 Alexander Kahl <akahl at
iconmobile.com> - 1.7.0-2
- bump, forgot internal docbook fix from rawhide build
- Tue Nov 18 2008 Alexander Kahl <akahl at
iconmobile.com> - 1.7.0-1
- update to 1.7.0
- fix to use internal docbook
- deactivate incubator development stuff for non-rawhide
- Wed Nov 12 2008 Alexander Kahl <akahl at
iconmobile.com> - 1.6.2-2
- last tag failed, bump
- Wed Nov 12 2008 Alexander Kahl <akahl at
iconmobile.com> - 1.6.2-1
- update to 1.6.2
- Tue Sep 16 2008 Alexander Kahl <akahl at
iconmobile.com> - 1.6.1-1
- update to 1.6.1
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=487696"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2009-June/025048.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?81540eb7"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected php-ZendFramework package."
);
script_set_attribute(attribute:"risk_factor", value:"High");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-ZendFramework");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:10");
script_set_attribute(attribute:"patch_publication_date", value:"2009/03/18");
script_set_attribute(attribute:"plugin_publication_date", value:"2009/06/16");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2009-2021 Tenable Network Security, Inc.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^10([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 10.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC10", reference:"php-ZendFramework-1.7.7-2.fc10")) flag++;
if (flag)
{
if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
else security_hole(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php-ZendFramework");
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation