{"published": "2011-05-28T00:00:00", "id": "SLACKWARE_SSA_2003-253-01.NASL", "cvss": {"score": 0.0, "vector": "NONE"}, "history": [{"differentElements": ["cpe"], "edition": 1, "lastseen": "2016-09-26T17:23:23", "bulletin": {"enchantments": {}, "published": "2011-05-28T00:00:00", "id": "SLACKWARE_SSA_2003-253-01.NASL", "cvss": {"score": 0.0, "vector": "NONE"}, "history": [], "cpe": [], "hash": "c3e775670a37a7cab1bd756bad15019b43fdb8abd09f836f18e94ae88f8e45cb", "description": "Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail reader should upgrade.", "type": "nessus", "pluginID": "54862", "lastseen": "2016-09-26T17:23:23", "edition": 1, "title": "Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)", "href": "https://www.tenable.com/plugins/index.php?view=single&id=54862", "modified": "2013-06-01T00:00:00", "bulletinFamily": "scanner", "viewCount": 0, "cvelist": [], "references": ["http://www.nessus.org/u?12babf6d"], "naslFamily": "Slackware Local Security Checks", "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2003-253-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(54862);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2013/06/01 00:36:12 $\");\n\n script_osvdb_id(9003);\n script_xref(name:\"SSA\", value:\"2003-253-01\");\n\n script_name(english:\"Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which\ncould lead to arbitrary code execution when a specially crafted email\nis processed by Pine. This problem is fixed in Pine 4.58. Sites which\nuse the Pine mail reader should upgrade.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2003&m=slackware-security.347016\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?12babf6d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected pine package.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:pine\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:9.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2003/09/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/05/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2003/09/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2013 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"8.1\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"9.0\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i486\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "hashmap": [{"hash": "8a9ae066bb2cd6cc945fcd802e204892", "key": "published"}, {"hash": "21dfa4bec1703bba45066edf0f4da915", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "11321bbe3ac9e1c95903acaac9b91167", "key": "href"}, {"hash": "74e3c312196c1c8440e6a04f4f8964cc", "key": "sourceData"}, {"hash": "01393c6508393b2e45aa397eca03092d", "key": "pluginID"}, {"hash": "550b4f0cc4e5adba1137421fd96315c6", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "43a3ec56ec636b53af6d97a47899295c", "key": "naslFamily"}, {"hash": "6abaf77c01dc0fdf47fdaee14180268e", "key": "description"}, {"hash": "97ea87d6e8ef74740a53e944a5d5c86d", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "objectVersion": "1.2"}}], "description": "Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail reader should upgrade.", "hash": "b5f1822b89452c72616c4b15dbe66ee6a89699e7165fdc2979e3ba0eadbcf775", "enchantments": {"vulnersScore": 7.5}, "type": "nessus", "pluginID": "54862", "lastseen": "2017-10-29T13:33:58", "edition": 2, "cpe": ["p-cpe:/a:slackware:slackware_linux:pine", "cpe:/o:slackware:slackware_linux:8.1", "cpe:/o:slackware:slackware_linux:9.0", "cpe:/o:slackware:slackware_linux"], "title": "Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)", "href": "https://www.tenable.com/plugins/index.php?view=single&id=54862", "modified": "2013-06-01T00:00:00", "bulletinFamily": "scanner", "viewCount": 0, "cvelist": [], "references": ["http://www.nessus.org/u?12babf6d"], "naslFamily": "Slackware Local Security Checks", "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2003-253-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(54862);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2013/06/01 00:36:12 $\");\n\n script_osvdb_id(9003);\n script_xref(name:\"SSA\", value:\"2003-253-01\");\n\n script_name(english:\"Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which\ncould lead to arbitrary code execution when a specially crafted email\nis processed by Pine. This problem is fixed in Pine 4.58. Sites which\nuse the Pine mail reader should upgrade.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2003&m=slackware-security.347016\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?12babf6d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected pine package.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:pine\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:9.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2003/09/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/05/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2003/09/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2013 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"8.1\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"9.0\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i486\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "hashmap": [{"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "e1899552cf0895295aa87ab4300f4473", "key": "cpe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "6abaf77c01dc0fdf47fdaee14180268e", "key": "description"}, {"hash": "11321bbe3ac9e1c95903acaac9b91167", "key": "href"}, {"hash": "97ea87d6e8ef74740a53e944a5d5c86d", "key": "modified"}, {"hash": "43a3ec56ec636b53af6d97a47899295c", "key": "naslFamily"}, {"hash": "01393c6508393b2e45aa397eca03092d", "key": "pluginID"}, {"hash": "8a9ae066bb2cd6cc945fcd802e204892", "key": "published"}, {"hash": "21dfa4bec1703bba45066edf0f4da915", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "74e3c312196c1c8440e6a04f4f8964cc", "key": "sourceData"}, {"hash": "550b4f0cc4e5adba1137421fd96315c6", "key": "title"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}], "objectVersion": "1.3"}

{"result": {}}