Fedora 12 : banshee-1.6.1-4.fc12 (2010-16907)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2010-16907.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(50564);
  script_version("1.12");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");

  script_cve_id("CVE-2010-3998");
  script_bugtraq_id(44752);
  script_xref(name:"FEDORA", value:"2010-16907");

  script_name(english:"Fedora 12 : banshee-1.6.1-4.fc12 (2010-16907)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"  - Mon Oct 25 2010 Christian Krause <chkr at
    fedoraproject.org> - 1.6.1-4

    - Add a patch to fix CVE-2010-3998

    - Sat Jun 26 2010 Christian Krause <chkr at
      fedoraproject.org> - 1.6.1-3

    - Fix status icon transparency (BZ 533308)

    - Thu Jun 17 2010 Christian Krause <chkr at
      fedoraproject.org> - 1.6.1-2

    - avoid 'DllNotFoundException: libbnpx11' when switching
      to fullscreen mode

  - Tue May 18 2010 Christian Krause <chkr at
    fedoraproject.org> - 1.6.1-1

    - Update to 1.6.1 release

    - Thu Apr 8 2010 Christian Krause <chkr at
      fedoraproject.org> - 1.6.0-1

    - Update to 1.6.0 release

    - Remove upstreamed patch (support for older mono
      versions)

    - Sun Feb 28 2010 Christian Krause <chkr at
      fedoraproject.org> - 1.5.5-1

    - Update to 1.5.5 release

    - Add patch to support older mono versions

    - Remove upstreamed patch (Spanish translation update)

    - Wed Feb 3 2010 Christian Krause <chkr at
      fedoraproject.org> - 1.5.3-1

    - Update to final 1.5.3 release

    - Remove upstreamed patch (last.fm integration)

    - Update Spanish translation

    - Wed Dec 16 2009 Christian Krause <chkr at
      fedoraproject.org> - 1.5.3-0.1.20091216git

    - Update to latest snapshot to pick up DeviceKit-disks
      integration to fix iPod support (BZ 495240)

  - Add a minor patch to fix the last.fm integration

    - Tue Nov 24 2009 Christian Krause <chkr at
      fedoraproject.org> - 1.5.2-1

    - Update to final 1.5.2 release

    - Wed Nov 18 2009 Christian Krause <chkr at
      fedoraproject.org> - 1.5.2-0.1.20091118git

    - Update to latest snapshot

    - Remove all *.la and *.a files during %install

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=644554"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2010-November/050747.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?07549d9d"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected banshee package."
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:ND");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:banshee");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:12");

  script_set_attribute(attribute:"patch_publication_date", value:"2010/10/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2010/11/12");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2010-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^12([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 12.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC12", reference:"banshee-1.6.1-4.fc12")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "banshee");
}