Fedora 11 : GraphicsMagick-1.3.7-4.fc11 (2010-0001)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2010-0001.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(47171);
  script_version("1.13");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");

  script_cve_id("CVE-2009-1882");
  script_bugtraq_id(35111);
  script_xref(name:"FEDORA", value:"2010-0001");

  script_name(english:"Fedora 11 : GraphicsMagick-1.3.7-4.fc11 (2010-0001)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"  - Mon Dec 28 2009 Rex Dieter <rdieter at
    fedoraproject.org> - 1.3.7-4

    - CVE-2009-1882 (#503017)

    - Fri Dec 4 2009 Stepan Kasal <skasal at redhat.com> -
      1.3.7-3

    - rebuild against perl 5.10.1

    - Fri Nov 6 2009 Rex Dieter <rdieter at
      fedoraproject.org> - 1.3.7-2

    - cleanup/uncruftify .spec

    - Thu Sep 17 2009 Rex Dieter <rdieter at
      fedoraproject.org> - 1.3.7-1

    - GraphicsMagick-1.3.7

    - Mon Aug 3 2009 Ville Skytta <ville.skytta at iki.fi> -
      1.3.6-2

    - Use lzma-compressed upstream source tarball.

    - Wed Jul 29 2009 Rex Dieter <rdieter at
      fedoraproject.org> 1.3.6-1

    - GraphicsMagick-1.3.6

    - Fri Jul 24 2009 Fedora Release Engineering <rel-eng at
      lists.fedoraproject.org> - 1.3.5-2

    - Rebuilt for
      https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

    - Tue Jun 30 2009 Rex Dieter <rdieter at
      fedoraproject.org> - 1.3.5-1

    - GraphicsMagick-1.3.5, ABI break (#487605)

    - --without-libgs (for now, per upstream advice)

    - BR: jasper-devel

    - Tue Jun 30 2009 Rex Dieter <rdieter at
      fedoraproject.org> - 1.1.15-1

    - GraphicsMagick-1.1.15

    - fix BuildRoot

    - multiarch conflicts in GraphicsMagick (#341381)

    - broken -L in GraphicsMagick.pc (#456466)

    - %files: track sonames

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=503017"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?dd59db77"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected GraphicsMagick package."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(189);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:GraphicsMagick");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:11");

  script_set_attribute(attribute:"patch_publication_date", value:"2010/01/02");
  script_set_attribute(attribute:"plugin_publication_date", value:"2010/07/01");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2010-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^11([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 11.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC11", reference:"GraphicsMagick-1.3.7-4.fc11")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "GraphicsMagick");
}