Fedora 13 : samba-3.5.8-74.fc13 (2011-3120)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2011-3120.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(52723);
  script_version("1.10");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");

  script_cve_id("CVE-2011-0719");
  script_xref(name:"FEDORA", value:"2011-3120");

  script_name(english:"Fedora 13 : samba-3.5.8-74.fc13 (2011-3120)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"  - Tue Mar 8 2011 Guenther Deschner <gdeschner at
    redhat.com> - 3.5.8-74

    - Update to 3.5.8

    - resolves: #617482

    - Thu Mar 3 2011 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.7-73

    - Security update to 3.5.7 to address CVE-2011-0719

    - resolves: #681852

    - Thu Jan 6 2011 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.6-72

    - Fix GSSAPI checksum for some SMB servers

    - resolves: #667644

    - Thu Nov 18 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.6-71

    - Fix libsmbclient SMB signing

    - resolves: #598620

    - Mon Nov 1 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.6-70

    - Handle no network case in init scripts

    - resolves: #604147

    - Fri Oct 8 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.6-69

    - Update to 3.5.6

    - resolves: #617771

    - Thu Sep 9 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.5-68

    - Security Release, fixes CVE-2010-3069

    - resolves: #630869

    - Thu Aug 26 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.4-67

    - Put winbind krb5 locator plugin into a separate rpm

    - resolves: #627181

    - Tue Aug 24 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.4-66

    - More fixes for winbind schannel

    - Thu Aug 19 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.4-65

    - Fix winbind default domain

    - related: #618201

    - Wed Aug 18 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.4-64

    - Fix offline authentication

    - resolves: #618201

    - Tue Aug 10 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.4-63

    - Fix winbind secure channel (samlogonex)

    - Wed Jun 23 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.4-62

    - Update to 3.5.4

    - Wed May 19 2010 Guenther Deschner <gdeschner at
      redhat.com> - 3.5.3-61

    - Update to 3.5.3

    - Make sure nmb and smb initscripts return LSB compliant
      return codes

    - Fix winbind over ipv6

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=678328"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?01855a91"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected samba package.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:samba");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:13");

  script_set_attribute(attribute:"patch_publication_date", value:"2011/03/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2011/03/21");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2011-2021 Tenable Network Security, Inc.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^13([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 13.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC13", reference:"samba-3.5.8-74.fc13")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "samba");
}