Lucene search
This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2012-751.NASLHistoryJun 13, 2014 - 12:00 a.m.
openSUSE Security Update : libqt4 (openSUSE-SU-2012:1420-1)
2014-06-1300:00:00
This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
22
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
61.5%
This update of libqt4 disabled compression to mitigate the CRIME attack.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2012-751.
#
# The text description of this plugin is (C) SUSE LLC.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(74796);
script_version("1.4");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");
script_cve_id("CVE-2012-4929");
script_name(english:"openSUSE Security Update : libqt4 (openSUSE-SU-2012:1420-1)");
script_summary(english:"Check for the openSUSE-2012-751 patch");
script_set_attribute(
attribute:"synopsis",
value:"The remote openSUSE host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"This update of libqt4 disabled compression to mitigate the CRIME
attack."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.novell.com/show_bug.cgi?id=779952"
);
script_set_attribute(
attribute:"see_also",
value:"https://lists.opensuse.org/opensuse-updates/2012-10/msg00096.html"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected libqt4 packages."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-debugsource");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-devel-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-devel-doc-data");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-devel-doc-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-devel-doc-debugsource");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-private-headers-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-qt3support");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-qt3support-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-qt3support-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-qt3support-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-mysql");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-mysql-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-mysql-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-mysql-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-plugins-debugsource");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-postgresql");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-postgresql-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-postgresql-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-postgresql-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-sqlite");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-sqlite-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-sqlite-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-sqlite-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-unixODBC");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-unixODBC-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-unixODBC-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-sql-unixODBC-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-x11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-x11-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-x11-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt4-x11-debuginfo-32bit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:qt4-x11-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:qt4-x11-tools-debuginfo");
script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:12.2");
script_set_attribute(attribute:"patch_publication_date", value:"2012/10/20");
script_set_attribute(attribute:"plugin_publication_date", value:"2014/06/13");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"SuSE Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE12\.2)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "12.2", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);
flag = 0;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-debugsource-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-devel-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-devel-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-devel-doc-data-4.8.1-2.4.2") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-devel-doc-debuginfo-4.8.1-2.4.2") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-devel-doc-debugsource-4.8.1-2.4.2") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-private-headers-devel-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-qt3support-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-qt3support-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-mysql-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-mysql-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-plugins-debugsource-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-postgresql-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-postgresql-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-sqlite-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-sqlite-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-unixODBC-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-sql-unixODBC-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-x11-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"libqt4-x11-debuginfo-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"qt4-x11-tools-4.8.1-2.4.2") ) flag++;
if ( rpm_check(release:"SUSE12.2", reference:"qt4-x11-tools-debuginfo-4.8.1-2.4.2") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-qt3support-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-qt3support-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-mysql-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-mysql-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-postgresql-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-postgresql-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-sqlite-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-sqlite-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-unixODBC-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-sql-unixODBC-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-x11-32bit-4.8.1-2.4.1") ) flag++;
if ( rpm_check(release:"SUSE12.2", cpu:"x86_64", reference:"libqt4-x11-debuginfo-32bit-4.8.1-2.4.1") ) flag++;
if (flag)
{
if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
else security_note(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libqt4-devel-doc-data / libqt4-devel-doc-debuginfo / etc");
}
Related
openvas
openvas
Ubuntu: Security Advisory (USN-1628-1)
2012-11-09 00:00:00
Debian: Security Advisory (DSA-2627-1)
2013-02-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:1428-1)
2021-06-09 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2013-07-04 00:00:00
Qt vulnerability
2012-11-08 00:00:00
Apache HTTP Server vulnerabilities
2012-11-08 00:00:00
debian
debian
[SECURITY] [DSA 2627-1] nginx security update
2013-02-17 11:14:31
[SECURITY] [DSA 2579-1] apache2 security update
2012-11-30 13:22:52
openssl security update
2014-06-20 16:35:50
nessus
nessus
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS : qt4-x11 vulnerability (USN-1628-1)
2012-11-09 00:00:00
F5 Networks BIG-IP : CRIME vulnerability via TLS 1.2 protocol (K14054)
2014-10-10 00:00:00
cve
cve
CVE-2012-4929
2012-09-15 18:55:03
CVE-2013-3587
2020-02-21 18:15:11
cvelist
cvelist
CVE-2012-4929
2012-09-15 18:00:00
CVE-2013-3587
2020-02-21 17:11:47
osv
osv
CGA-3gmg-9rq9-3vfp
2024-06-06 12:21:55
links-2.13-1.3 on GA media
2024-06-15 00:00:00
nginx - information leak
2013-02-17 00:00:00
nvd
nvd
CVE-2012-4929
2012-09-15 18:55:03
CVE-2013-3587
2020-02-21 18:15:11
prion
prion
Design/Logic Flaw
2012-09-15 18:55:00
Design/Logic Flaw
2020-02-21 18:15:00
threatpost
threatpost
Apple Patches Mass of Security Bugs in OS X and Safari
2013-06-05 09:51:54
f5
f5
SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2012-12-05 00:00:00
K14054 : CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2013-09-09 00:00:00
SOL14059 - CRIME vulnerability via the SPDY protocol CVE-2012-4930
2012-12-19 00:00:00
jvn
jvn
JVN#65273415: Android OS issue where it is affected by the CRIME attack
2016-07-22 00:00:00
debiancve
debiancve
CVE-2012-4929
2012-09-15 18:55:03
ubuntucve
ubuntucve
CVE-2012-4929
2012-09-15 00:00:00
CVE-2013-3587
2020-02-21 00:00:00
ibm
ibm
veracode
veracode
Information Leakage
2019-01-15 08:58:53
kitploit
kitploit
Sitadel - Web Application Security Scanner
2019-01-14 12:13:00
fedora
fedora
[SECURITY] Fedora 18 Update: mingw-openssl-1.0.1e-1.fc18
2013-04-03 04:51:11
[SECURITY] Fedora 20 Update: Pound-2.6-8.fc20
2014-11-12 02:45:18
[SECURITY] Fedora 19 Update: Pound-2.6-8.fc19
2014-11-07 02:38:03
securityvulns
securityvulns
[SECURITY] [DSA 2579-1] apache2 security update
2012-12-02 00:00:00
Apache security vulnerabilities
2012-12-02 00:00:00
Apple Mac OS X multiple security vulnerabilities
2013-06-17 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2012-4929, CVE-2012-4930 aka CRIME attack
2012-10-20 22:00:00
cert
cert
BREACH vulnerability in compressed HTTPS
2013-08-02 00:00:00
redhat
redhat
(RHSA-2013:0587) Moderate: openssl security update
2013-03-04 00:00:00
(RHSA-2014:0416) Important: rhevm-spice-client security update
2014-04-17 00:00:00
(RHSA-2013:0636) Important: rhev-hypervisor6 security and bug fix update
2013-03-13 00:00:00
oraclelinux
oraclelinux
openssl security update
2013-03-04 00:00:00
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2016-09-27 00:00:00
centos
centos
openssl security update
2013-03-04 22:46:45
amazon
amazon
Medium: openssl
2013-03-14 22:04:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
61.5%
Related for OPENSUSE-2012-751.NASL