ID REDHAT-RHSA-2006-0576.NASL Type nessus Reporter Tenable Modified 2016-12-29T00:00:00
Description
Updated kdebase packages that resolve a security issue are now available.
This update has been rated as having moderate security impact by the Red Hat Security Response Team.
The kdebase packages provide the core applications for KDE, the K Desktop Environment.
A flaw was found in KDE where the kdesktop_lock process sometimes failed to terminate properly. This issue could either block the user's ability to manually lock the desktop or prevent the screensaver to activate, both of which could have a security impact for users who rely on these functionalities. (CVE-2006-2933)
Please note that this issue only affected Red Hat Enterprise Linux 3.
All users of kdebase should upgrade to these updated packages, which contain a patch to resolve this issue.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2006:0576. The text
# itself is copyright (C) Red Hat, Inc.
#
include("compat.inc");
if (description)
{
script_id(22111);
script_version ("$Revision: 1.16 $");
script_cvs_date("$Date: 2016/12/29 15:35:19 $");
script_cve_id("CVE-2006-2933");
script_osvdb_id(28550);
script_xref(name:"RHSA", value:"2006:0576");
script_name(english:"RHEL 3 : kdebase (RHSA-2006:0576)");
script_summary(english:"Checks the rpm output for the updated packages");
script_set_attribute(
attribute:"synopsis",
value:"The remote Red Hat host is missing one or more security updates."
);
script_set_attribute(
attribute:"description",
value:
"Updated kdebase packages that resolve a security issue are now
available.
This update has been rated as having moderate security impact by the
Red Hat Security Response Team.
The kdebase packages provide the core applications for KDE, the K
Desktop Environment.
A flaw was found in KDE where the kdesktop_lock process sometimes
failed to terminate properly. This issue could either block the user's
ability to manually lock the desktop or prevent the screensaver to
activate, both of which could have a security impact for users who
rely on these functionalities. (CVE-2006-2933)
Please note that this issue only affected Red Hat Enterprise Linux 3.
All users of kdebase should upgrade to these updated packages, which
contain a patch to resolve this issue."
);
script_set_attribute(
attribute:"see_also",
value:"https://www.redhat.com/security/data/cve/CVE-2006-2933.html"
);
script_set_attribute(
attribute:"see_also",
value:"http://rhn.redhat.com/errata/RHSA-2006-0576.html"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected kdebase and / or kdebase-devel packages."
);
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kdebase");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kdebase-devel");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:3");
script_set_attribute(attribute:"patch_publication_date", value:"2006/07/25");
script_set_attribute(attribute:"plugin_publication_date", value:"2006/07/28");
script_set_attribute(attribute:"vuln_publication_date", value:"2006/01/13");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2006-2016 Tenable Network Security, Inc.");
script_family(english:"Red Hat Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = eregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! ereg(pattern:"^3([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 3.x", "Red Hat " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo))
{
rhsa = "RHSA-2006:0576";
yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
if (!empty_or_null(yum_report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : yum_report
);
exit(0);
}
else
{
audit_message = "affected by Red Hat security advisory " + rhsa;
audit(AUDIT_OS_NOT, audit_message);
}
}
else
{
flag = 0;
if (rpm_check(release:"RHEL3", reference:"kdebase-3.1.3-5.11")) flag++;
if (rpm_check(release:"RHEL3", reference:"kdebase-devel-3.1.3-5.11")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get() + redhat_report_package_caveat()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "kdebase / kdebase-devel");
}
}
{"id": "REDHAT-RHSA-2006-0576.NASL", "bulletinFamily": "scanner", "title": "RHEL 3 : kdebase (RHSA-2006:0576)", "description": "Updated kdebase packages that resolve a security issue are now available.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K Desktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes failed to terminate properly. This issue could either block the user's ability to manually lock the desktop or prevent the screensaver to activate, both of which could have a security impact for users who rely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which contain a patch to resolve this issue.", "published": "2006-07-28T00:00:00", "modified": "2016-12-29T00:00:00", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=22111", "reporter": "Tenable", "references": ["https://www.redhat.com/security/data/cve/CVE-2006-2933.html", "http://rhn.redhat.com/errata/RHSA-2006-0576.html"], "cvelist": ["CVE-2006-2933"], "type": "nessus", "lastseen": "2017-10-29T13:42:21", "history": [{"bulletin": {"bulletinFamily": "exploit", "cvelist": ["CVE-2006-2933"], "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "Updated kdebase packages that resolve a security issue are now available.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K Desktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes failed to terminate properly. This issue could either block the user's ability to manually lock the desktop or prevent the screensaver to activate, both of which could have a security impact for users who rely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which contain a patch to resolve this issue.", "edition": 1, "hash": "b90b7c99d190c2ac6d0e961f3c8833f82f123b00a371ec2488b8e5d80464b0e6", "hashmap": [{"hash": "708697c63f7eb369319c6523380bdf7a", "key": "bulletinFamily"}, {"hash": "9507cc01ba8cd6488cb9d14b70d2bd07", "key": "references"}, {"hash": "1f490f8262cbf5956908b38b0200168d", "key": "published"}, {"hash": "559a92c8f3f2fe29ed723ae0290e2d31", "key": "href"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "4717067060c8175feee986ac77b75b05", "key": "sourceData"}, {"hash": "692c38bfed7e3b1699d0041854da3b8a", "key": "description"}, {"hash": "295089851b5db421f2f4d97d11160d57", "key": "cvss"}, {"hash": "5f2e147fdf9705051e632e4edcb67241", "key": "cvelist"}, {"hash": "02e253a6d618f5bb63be3a33904bc3e2", "key": "pluginID"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "98f00858001a0dd10fbd90da55b4ee8c", "key": "modified"}, {"hash": "8c7500db7791f1c10bb5e97e29ab1a6c", "key": "title"}, {"hash": "b46559ea68ec9a13474c3a7776817cfd", "key": "naslFamily"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=22111", "id": "REDHAT-RHSA-2006-0576.NASL", "lastseen": "2016-09-26T17:25:46", "modified": "2014-11-08T00:00:00", "naslFamily": "Red Hat Local Security Checks", "objectVersion": "1.2", "pluginID": "22111", "published": "2006-07-28T00:00:00", "references": ["https://www.redhat.com/security/data/cve/CVE-2006-2933.html", "http://rhn.redhat.com/errata/RHSA-2006-0576.html"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2006:0576. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(22111);\n script_version (\"$Revision: 1.15 $\");\n script_cvs_date(\"$Date: 2014/11/08 01:27:48 $\");\n\n script_cve_id(\"CVE-2006-2933\");\n script_osvdb_id(28550);\n script_xref(name:\"RHSA\", value:\"2006:0576\");\n\n script_name(english:\"RHEL 3 : kdebase (RHSA-2006:0576)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kdebase packages that resolve a security issue are now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K\nDesktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes\nfailed to terminate properly. This issue could either block the user's\nability to manually lock the desktop or prevent the screensaver to\nactivate, both of which could have a security impact for users who\nrely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which\ncontain a patch to resolve this issue.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2006-2933.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2006-0576.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kdebase and / or kdebase-devel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kdebase\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kdebase-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2006/07/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/07/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2006/01/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2014 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^3([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 3.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"RHEL3\", reference:\"kdebase-3.1.3-5.11\")) flag++;\nif (rpm_check(release:\"RHEL3\", reference:\"kdebase-devel-3.1.3-5.11\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kdebase / kdebase-devel\");\n}\n", "title": "RHEL 3 : kdebase (RHSA-2006:0576)", "type": "nessus", "viewCount": 0}, "differentElements": ["modified", "sourceData"], "edition": 1, "lastseen": "2016-09-26T17:25:46"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": ["CVE-2006-2933"], "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "Updated kdebase packages that resolve a security issue are now available.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K Desktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes failed to terminate properly. This issue could either block the user's ability to manually lock the desktop or prevent the screensaver to activate, both of which could have a security impact for users who rely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which contain a patch to resolve this issue.", "edition": 2, "enchantments": {}, "hash": "c3a1b83b6d82e8c359cb738504897ec95be2ad61157b24c8b11cfe650bcb9633", "hashmap": [{"hash": "9507cc01ba8cd6488cb9d14b70d2bd07", "key": "references"}, {"hash": "1f490f8262cbf5956908b38b0200168d", "key": "published"}, {"hash": "559a92c8f3f2fe29ed723ae0290e2d31", "key": "href"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "692c38bfed7e3b1699d0041854da3b8a", "key": "description"}, {"hash": "5f2e147fdf9705051e632e4edcb67241", "key": "cvelist"}, {"hash": "851dbb0f33630b51c53f0d6ca1a06fc3", "key": "modified"}, {"hash": "02e253a6d618f5bb63be3a33904bc3e2", "key": "pluginID"}, {"hash": "47748c03d7d683caa6f7dd4bda6cc68c", "key": "sourceData"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "292f2e293571b0e70e3182b615982dad", "key": "cvss"}, {"hash": "8c7500db7791f1c10bb5e97e29ab1a6c", "key": "title"}, {"hash": "b46559ea68ec9a13474c3a7776817cfd", "key": "naslFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=22111", "id": "REDHAT-RHSA-2006-0576.NASL", "lastseen": "2016-12-30T02:17:10", "modified": "2016-12-29T00:00:00", "naslFamily": "Red Hat Local Security Checks", "objectVersion": "1.2", "pluginID": "22111", "published": "2006-07-28T00:00:00", "references": ["https://www.redhat.com/security/data/cve/CVE-2006-2933.html", "http://rhn.redhat.com/errata/RHSA-2006-0576.html"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2006:0576. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(22111);\n script_version (\"$Revision: 1.16 $\");\n script_cvs_date(\"$Date: 2016/12/29 15:35:19 $\");\n\n script_cve_id(\"CVE-2006-2933\");\n script_osvdb_id(28550);\n script_xref(name:\"RHSA\", value:\"2006:0576\");\n\n script_name(english:\"RHEL 3 : kdebase (RHSA-2006:0576)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kdebase packages that resolve a security issue are now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K\nDesktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes\nfailed to terminate properly. This issue could either block the user's\nability to manually lock the desktop or prevent the screensaver to\nactivate, both of which could have a security impact for users who\nrely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which\ncontain a patch to resolve this issue.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2006-2933.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2006-0576.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kdebase and / or kdebase-devel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kdebase\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kdebase-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2006/07/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/07/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2006/01/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^3([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 3.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2006:0576\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL3\", reference:\"kdebase-3.1.3-5.11\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"kdebase-devel-3.1.3-5.11\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kdebase / kdebase-devel\");\n }\n}\n", "title": "RHEL 3 : kdebase (RHSA-2006:0576)", "type": "nessus", "viewCount": 2}, "differentElements": ["cpe"], "edition": 2, "lastseen": "2016-12-30T02:17:10"}], "edition": 3, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "705231a97d2943300cd365982e7c8957"}, {"key": "cvelist", "hash": "5f2e147fdf9705051e632e4edcb67241"}, {"key": "cvss", "hash": "292f2e293571b0e70e3182b615982dad"}, {"key": "description", "hash": "692c38bfed7e3b1699d0041854da3b8a"}, {"key": "href", "hash": "559a92c8f3f2fe29ed723ae0290e2d31"}, {"key": "modified", "hash": "851dbb0f33630b51c53f0d6ca1a06fc3"}, {"key": "naslFamily", "hash": "b46559ea68ec9a13474c3a7776817cfd"}, {"key": "pluginID", "hash": "02e253a6d618f5bb63be3a33904bc3e2"}, {"key": "published", "hash": "1f490f8262cbf5956908b38b0200168d"}, {"key": "references", "hash": "9507cc01ba8cd6488cb9d14b70d2bd07"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "47748c03d7d683caa6f7dd4bda6cc68c"}, {"key": "title", "hash": "8c7500db7791f1c10bb5e97e29ab1a6c"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "a2c1e910898923fd7355945e388f9e46c07f3e0605bdc2f4a07140383798fd2b", "viewCount": 2, "enchantments": {"vulnersScore": 7.5}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2006:0576. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(22111);\n script_version (\"$Revision: 1.16 $\");\n script_cvs_date(\"$Date: 2016/12/29 15:35:19 $\");\n\n script_cve_id(\"CVE-2006-2933\");\n script_osvdb_id(28550);\n script_xref(name:\"RHSA\", value:\"2006:0576\");\n\n script_name(english:\"RHEL 3 : kdebase (RHSA-2006:0576)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kdebase packages that resolve a security issue are now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K\nDesktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes\nfailed to terminate properly. This issue could either block the user's\nability to manually lock the desktop or prevent the screensaver to\nactivate, both of which could have a security impact for users who\nrely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which\ncontain a patch to resolve this issue.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2006-2933.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2006-0576.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kdebase and / or kdebase-devel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kdebase\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kdebase-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2006/07/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/07/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2006/01/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^3([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 3.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2006:0576\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL3\", reference:\"kdebase-3.1.3-5.11\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"kdebase-devel-3.1.3-5.11\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kdebase / kdebase-devel\");\n }\n}\n", "naslFamily": "Red Hat Local Security Checks", "pluginID": "22111", "cpe": ["cpe:/o:redhat:enterprise_linux:3", "p-cpe:/a:redhat:enterprise_linux:kdebase", "p-cpe:/a:redhat:enterprise_linux:kdebase-devel"]}
{"result": {"cve": [{"id": "CVE-2006-2933", "type": "cve", "title": "CVE-2006-2933", "description": "kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop.", "published": "2006-07-27T18:04:00", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-2933", "cvelist": ["CVE-2006-2933"], "lastseen": "2017-10-11T11:06:40"}], "nessus": [{"id": "ORACLELINUX_ELSA-2006-0576.NASL", "type": "nessus", "title": "Oracle Linux 3 : kdebase (ELSA-2006-0576)", "description": "From Red Hat Security Advisory 2006:0576 :\n\nUpdated kdebase packages that resolve a security issue are now available.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K Desktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes failed to terminate properly. This issue could either block the user's ability to manually lock the desktop or prevent the screensaver to activate, both of which could have a security impact for users who rely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which contain a patch to resolve this issue.", "published": "2013-07-12T00:00:00", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=67396", "cvelist": ["CVE-2006-2933"], "lastseen": "2017-10-29T13:42:43"}, {"id": "CENTOS_RHSA-2006-0576.NASL", "type": "nessus", "title": "CentOS 3 : kdebase (CESA-2006:0576)", "description": "Updated kdebase packages that resolve a security issue are now available.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe kdebase packages provide the core applications for KDE, the K Desktop Environment.\n\nA flaw was found in KDE where the kdesktop_lock process sometimes failed to terminate properly. This issue could either block the user's ability to manually lock the desktop or prevent the screensaver to activate, both of which could have a security impact for users who rely on these functionalities. (CVE-2006-2933)\n\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\n\nAll users of kdebase should upgrade to these updated packages, which contain a patch to resolve this issue.", "published": "2006-07-28T00:00:00", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=22103", "cvelist": ["CVE-2006-2933"], "lastseen": "2017-10-29T13:33:35"}], "oraclelinux": [{"id": "ELSA-2006-0576", "type": "oraclelinux", "title": "kdebase security fix ", "description": " [3.1.3-5.11.0.1]\n - add /etc/enterprise-release\n \n [3.1.3-5.11]\n - kdesktop_lock should not stay running if grabInput failed #177755, \n CVE-2006-2933 ", "published": "2007-03-22T00:00:00", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "http://linux.oracle.com/errata/ELSA-2006-0576.html", "cvelist": ["CVE-2006-2933"], "lastseen": "2016-09-04T11:16:46"}], "osvdb": [{"id": "OSVDB:28550", "type": "osvdb", "title": "Red Hat Linux KDE kdesktop_lock Termination Failure", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177755\nSecurity Tracker: 1016571\n[Secunia Advisory ID:21203](https://secuniaresearch.flexerasoftware.com/advisories/21203/)\nRedHat RHSA: RHSA-2006:0576\n[CVE-2006-2933](https://vulners.com/cve/CVE-2006-2933)\nBugtraq ID: 19152\n", "published": "2006-01-13T08:04:03", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:28550", "cvelist": ["CVE-2006-2933"], "lastseen": "2017-04-28T13:20:24"}], "redhat": [{"id": "RHSA-2006:0576", "type": "redhat", "title": "(RHSA-2006:0576) kdebase security fix", "description": "The kdebase packages provide the core applications for KDE, the K Desktop\r\nEnvironment.\r\n\r\nA flaw was found in KDE where the kdesktop_lock process sometimes\r\nfailed to terminate properly. This issue could either block the user's\r\nability to manually lock the desktop or prevent the screensaver to\r\nactivate, both of which could have a security impact for users who rely on\r\nthese functionalities. \r\n(CVE-2006-2933)\r\n\r\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\r\n\r\nAll users of kdebase should upgrade to these updated packages, which\r\ncontain a patch to resolve this issue.", "published": "2006-07-25T04:00:00", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://access.redhat.com/errata/RHSA-2006:0576", "cvelist": ["CVE-2006-2933"], "lastseen": "2017-08-02T22:57:36"}], "centos": [{"id": "CESA-2006:0576", "type": "centos", "title": "kdebase security update", "description": "**CentOS Errata and Security Advisory** CESA-2006:0576\n\n\nThe kdebase packages provide the core applications for KDE, the K Desktop\r\nEnvironment.\r\n\r\nA flaw was found in KDE where the kdesktop_lock process sometimes\r\nfailed to terminate properly. This issue could either block the user's\r\nability to manually lock the desktop or prevent the screensaver to\r\nactivate, both of which could have a security impact for users who rely on\r\nthese functionalities. \r\n(CVE-2006-2933)\r\n\r\nPlease note that this issue only affected Red Hat Enterprise Linux 3.\r\n\r\nAll users of kdebase should upgrade to these updated packages, which\r\ncontain a patch to resolve this issue.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2006-August/013099.html\nhttp://lists.centos.org/pipermail/centos-announce/2006-August/013100.html\nhttp://lists.centos.org/pipermail/centos-announce/2006-July/013066.html\nhttp://lists.centos.org/pipermail/centos-announce/2006-July/013069.html\n\n**Affected packages:**\nkdebase\nkdebase-devel\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2006-0576.html", "published": "2006-07-25T22:06:20", "cvss": {"score": 4.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "http://lists.centos.org/pipermail/centos-announce/2006-July/013066.html", "cvelist": ["CVE-2006-2933"], "lastseen": "2018-03-28T20:55:08"}]}}