#%NASL_MIN_LEVEL 70300
# Disabled on 2011/05/27.
#
# This script was automatically generated from the SSA-2003-213-01
# Slackware Security Advisory
# It is released under the Nessus Script Licence.
# Slackware Security Advisories are copyright 1999-2004 Slackware Linux, Inc.
# SSA2nasl Convertor is copyright 2004 Tenable Network Security, Inc.
# See http://www.slackware.com/about/ or http://www.slackware.com/security/
# Slackware(R) is a registered trademark of Slackware Linux, Inc.
if (! defined_func("bn_random")) exit(0);
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description) {
script_id(18719);
script_version("1.11");
script_category(ACT_GATHER_INFO);
script_family(english: "Slackware Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_copyright("This script is Copyright (C) 2005-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_require_keys("Host/Slackware/release", "Host/Slackware/packages");
script_set_attribute(attribute:"synopsis", value:
"The remote host is missing the SSA-2003-213-01 security update." );
script_set_attribute(attribute:"description", value:
"Sendmail buffer overflow fixed (NEW)
The sendmail packages in Slackware 8.0, 8.1, and 9.0 have been patched
to fix a security problem. Note that this vulnerablity is NOT the same
one that was announced on March 3rd and requires a new fix.
All sites running sendmail should upgrade.
More information on the problem can be found here:
http://www.sendmail.org/8.12.9.html" );
script_set_attribute(attribute:"solution", value:
"Update the packages that are referenced in the security advisory." );
script_set_attribute(attribute:"risk_factor", value:"High");
script_set_attribute(attribute:"plugin_publication_date", value: "2005/07/13");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/14");
script_end_attributes();
script_summary("SSA-2003-213-01 Sendmail buffer overflow fixed (NEW)");
name["english"] = "SSA-2003-213-01 Sendmail buffer overflow fixed (NEW)";
script_xref(name:"SSA", value:"2003-213-01");
script_name(english:name["english"]);
exit(0);
}
exit(0);
include('slackware.inc');
include('global_settings.inc');
desc="";
if (slackware_check(osver: "8.1", pkgname: "sendmail", pkgver: "8.12.9", pkgnum: "1", pkgarch: "i386")) {
w++;
if (report_verbosity > 0) desc = strcat(desc, '
The package sendmail is vulnerable in Slackware 8.1
Upgrade to sendmail-8.12.9-i386-1 or newer.
');
}
if (slackware_check(osver: "8.1", pkgname: "sendmail-cf", pkgver: "8.12.9", pkgnum: "1", pkgarch: "noarch")) {
w++;
if (report_verbosity > 0) desc = strcat(desc, '
The package sendmail-cf is vulnerable in Slackware 8.1
Upgrade to sendmail-cf-8.12.9-noarch-1 or newer.
');
}
if (slackware_check(osver: "9.0", pkgname: "sendmail", pkgver: "8.12.9", pkgnum: "1", pkgarch: "i386")) {
w++;
if (report_verbosity > 0) desc = strcat(desc, '
The package sendmail is vulnerable in Slackware 9.0
Upgrade to sendmail-8.12.9-i386-1 or newer.
');
}
if (slackware_check(osver: "9.0", pkgname: "sendmail-cf", pkgver: "8.12.9", pkgnum: "1", pkgarch: "noarch")) {
w++;
if (report_verbosity > 0) desc = strcat(desc, '
The package sendmail-cf is vulnerable in Slackware 9.0
Upgrade to sendmail-cf-8.12.9-noarch-1 or newer.
');
}
if (w) { security_hole(port: 0, extra: desc); }
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation