MiracleLinux 4 : net-snmp-5.5-54.AXS4 (AXSA:2015-271:01)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# Miracle Linux Security Advisory AXSA:2015-271:01.
##

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(289461);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/16");

  script_cve_id("CVE-2014-3565");

  script_name(english:"MiracleLinux 4 : net-snmp-5.5-54.AXS4 (AXSA:2015-271:01)");

  script_set_attribute(attribute:"synopsis", value:
"The remote MiracleLinux host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the
AXSA:2015-271:01 advisory.

    SNMP (Simple Network Management Protocol) is a protocol used for
    network management. The NET-SNMP project includes various SNMP tools:
    an extensible agent, an SNMP library, tools for requesting or setting
    information from SNMP agents, tools for generating and handling SNMP
    traps and a version of the netstat command which uses SNMP. This
    package contains the snmpd and snmptrapd daemons, documentation, etc.
    You will probably also want to install the net-snmp-utils package,
    which contains NET-SNMP utilities.
    Security issues fixed with this release:
    CVE-2014-3565
    Fixed bugs:
    * The HOST-RESOURCES-MIB::hrSystemProcesses object was not implemented because
    parts of the HOST-RESOURCES-MIB module were rewritten in an earlier version of
    net-snmp. Consequently, HOST-RESOURCES-MIB::hrSystemProcesses did not provide
    information on the number of currently loaded or running processes. With this
    update, HOST-RESOURCES-MIB::hrSystemProcesses has been implemented, and the
    net-snmp daemon reports as expected.
    * The Net-SNMP agent daemon, snmpd, reloaded the system ARP table every 60
    seconds. As a consequence, snmpd could cause a short CPU usage spike on busy
    systems with a large APR table. With this update, the problem was fixed.
    * Previously, snmpd used an invalid pointer to the current time when
    periodically checking certain conditions specified by the monitor option in
    the /etc/snmpd/snmpd.conf file. Consequently, snmpd terminated unexpectedly on
    start with a segmentation fault if a certain entry with the monitor option was
    used. Now, snmpd has been update to pass this error.
    * Previously, snmpd expected 8-bit network interface indices when processing
    HOST-RESOURCES-MIB::hrDeviceTable. If an interface index of a local network
    interface was larger than 30,000 items, snmpd could terminate unexpectedly due
    to accessing invalid memory. The bug was fixed in this update.
    * The snmpdtrapd service incorrectly checked for errors when forwarding a trap
    with a RequestID value of 0, and logged Forward failed even though the trap
    was successfully forwarded. This update fixes snmptrapd checks and the
    aforementioned message is now logged only when appropriate.
    * Previously, snmpd ignored the value of the storageUseNFS option in the
    /etc/snmpd/snmpd.conf file. As a consequence, NFS drivers were shown as Network
    Disks, even though storageUseNFS was set to 2 to report them as Fixed
    Disks in HOST-RESOURCES-MIB::hrStorageTable. With this update, fixed it.
    * Previously, the Net-SNMP python binding used an incorrect size (8 bytes
    instead of 4) for variables of IPADDRESS type. Consequently, applications that
    were using Net-SNMP Python bindings could send malformed SNMP messages. With
    this update, this bug has been fixed.
    * Previously, the snmpd service did not cut values in
    HOST-RESOURCES-MIB::hrStorageTable to signed 32-bit integers, as required by
    SNMP standards, and provided the values as unsigned integers. As a consequence,
    the HOST-RESOURCES-MIB::hrStorageTable implementation did not conform to RFC
    2790. The values are now cut to 32-bit signed integers, and snmpd is therefore
    standard compliant.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://tsn.miraclelinux.com/en/node/5616");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2014-3565");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"vendor_severity", value:"Moderate");

  script_set_attribute(attribute:"vuln_publication_date", value:"2014/08/31");
  script_set_attribute(attribute:"patch_publication_date", value:"2015/08/06");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/01/16");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:net-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:net-snmp-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:net-snmp-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:net-snmp-perl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:net-snmp-python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:net-snmp-utils");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:miracle:linux:4");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Miracle Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/MiracleLinux/release", "Host/MiracleLinux/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'MIRACLE LINUX' >!< os_product) audit(AUDIT_OS_NOT, 'MIRACLE LINUX');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'MIRACLE LINUX');
if (! preg(pattern:"^4([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'MiracleLinux 4.x', 'MIRACLE LINUX ' + os_version);

if (!get_kb_item('Host/MiracleLinux/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('aarch64' >!< cpu && 'ppc' >!< cpu && 's390' >!< cpu && 'x86_64' >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'MIRACLE LINUX', cpu);

var constraints = [
  {
    'release': '4',
    'pkgs': [
      {'reference':'net-snmp-5.5-54.AXS4', 'cpu':'i686', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-5.5-54.AXS4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-devel-5.5-54.AXS4', 'cpu':'i686', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-devel-5.5-54.AXS4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-libs-5.5-54.AXS4', 'cpu':'i686', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-libs-5.5-54.AXS4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-perl-5.5-54.AXS4', 'cpu':'i686', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-perl-5.5-54.AXS4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-python-5.5-54.AXS4', 'cpu':'i686', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-python-5.5-54.AXS4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-utils-5.5-54.AXS4', 'cpu':'i686', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'net-snmp-utils-5.5-54.AXS4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}
if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'net-snmp / net-snmp-devel / net-snmp-libs / net-snmp-perl / etc');
}