The remote Fedora host is missing a security update. Update to 3.4.2 to mitigate CVE-2013-4969
Reporter | Title | Published | Views | Family All 34 |
---|---|---|---|---|
![]() | [SECURITY] [DSA 2831-2] puppet regression update | 17 Jan 201416:07 | – | debian |
![]() | [SECURITY] [DSA 2831-1] puppet security update | 31 Dec 201316:46 | – | debian |
![]() | [SECURITY] [DSA 2831-2] puppet regression update | 17 Jan 201416:07 | – | debian |
![]() | Updated puppet & puppet3 packages fix CVE-2013-4969 and a regression | 20 Feb 201401:15 | – | mageia |
![]() | Mandriva Linux Security Advisory : puppet (MDVSA-2014:040) | 19 Feb 201400:00 | – | nessus |
![]() | Fedora 19 : puppet-3.4.2-1.fc19 (2014-0850) | 24 Jan 201400:00 | – | nessus |
![]() | Puppet Symlink File Overwrite | 27 Jan 201400:00 | – | nessus |
![]() | Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : puppet vulnerability (USN-2077-1) | 7 Jan 201400:00 | – | nessus |
![]() | Debian DSA-2831-1 : puppet - insecure temporary files | 2 Jan 201400:00 | – | nessus |
![]() | Amazon Linux AMI : puppet (ALAS-2014-288) | 5 Feb 201400:00 | – | nessus |
Source | Link |
---|---|
nessus | www.nessus.org/u |
cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2014-0825.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(72112);
script_version("1.5");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2013-4969");
script_bugtraq_id(64552);
script_xref(name:"FEDORA", value:"2014-0825");
script_name(english:"Fedora 20 : puppet-3.4.2-1.fc20 (2014-0825)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Update to 3.4.2 to mitigate CVE-2013-4969
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1047792"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2014-January/127042.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?52dead90"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected puppet package."
);
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:puppet");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:20");
script_set_attribute(attribute:"patch_publication_date", value:"2014/01/15");
script_set_attribute(attribute:"plugin_publication_date", value:"2014/01/24");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^20([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 20.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC20", reference:"puppet-3.4.2-1.fc20")) flag++;
if (flag)
{
if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
else security_note(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "puppet");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo