{"id": "SLACKWARE_SSA_2003-253-01.NASL", "bulletinFamily": "scanner", "title": "Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)", "description": "Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail reader should upgrade.", "published": "2011-05-28T00:00:00", "modified": "2018-08-09T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=54862", "reporter": "Tenable", "references": ["http://www.nessus.org/u?12babf6d"], "cvelist": [], "type": "nessus", "lastseen": "2018-08-10T16:57:06", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": ["p-cpe:/a:slackware:slackware_linux:pine", "cpe:/o:slackware:slackware_linux:8.1", "cpe:/o:slackware:slackware_linux:9.0", "cpe:/o:slackware:slackware_linux"], "cvelist": [], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail reader should upgrade.", "edition": 2, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}}, "hash": "b5f1822b89452c72616c4b15dbe66ee6a89699e7165fdc2979e3ba0eadbcf775", "hashmap": [{"hash": "8a9ae066bb2cd6cc945fcd802e204892", "key": "published"}, {"hash": "e1899552cf0895295aa87ab4300f4473", "key": "cpe"}, {"hash": "21dfa4bec1703bba45066edf0f4da915", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "11321bbe3ac9e1c95903acaac9b91167", "key": "href"}, {"hash": "74e3c312196c1c8440e6a04f4f8964cc", "key": "sourceData"}, {"hash": "01393c6508393b2e45aa397eca03092d", "key": "pluginID"}, {"hash": "550b4f0cc4e5adba1137421fd96315c6", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "43a3ec56ec636b53af6d97a47899295c", "key": "naslFamily"}, {"hash": "6abaf77c01dc0fdf47fdaee14180268e", "key": "description"}, {"hash": "97ea87d6e8ef74740a53e944a5d5c86d", "key": "modified"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=54862", "id": "SLACKWARE_SSA_2003-253-01.NASL", "lastseen": "2017-10-29T13:33:58", "modified": "2013-06-01T00:00:00", "naslFamily": "Slackware Local Security Checks", "objectVersion": "1.3", "pluginID": "54862", "published": "2011-05-28T00:00:00", "references": ["http://www.nessus.org/u?12babf6d"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2003-253-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(54862);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2013/06/01 00:36:12 $\");\n\n script_osvdb_id(9003);\n script_xref(name:\"SSA\", value:\"2003-253-01\");\n\n script_name(english:\"Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which\ncould lead to arbitrary code execution when a specially crafted email\nis processed by Pine. This problem is fixed in Pine 4.58. Sites which\nuse the Pine mail reader should upgrade.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2003&m=slackware-security.347016\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?12babf6d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected pine package.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:pine\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:9.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2003/09/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/05/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2003/09/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2013 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"8.1\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"9.0\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i486\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "title": "Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)", "type": "nessus", "viewCount": 0}, "differentElements": ["modified", "sourceData"], "edition": 2, "lastseen": "2017-10-29T13:33:58"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": [], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail reader should upgrade.", "edition": 1, "enchantments": {}, "hash": "c3e775670a37a7cab1bd756bad15019b43fdb8abd09f836f18e94ae88f8e45cb", "hashmap": [{"hash": "8a9ae066bb2cd6cc945fcd802e204892", "key": "published"}, {"hash": "21dfa4bec1703bba45066edf0f4da915", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "11321bbe3ac9e1c95903acaac9b91167", "key": "href"}, {"hash": "74e3c312196c1c8440e6a04f4f8964cc", "key": "sourceData"}, {"hash": "01393c6508393b2e45aa397eca03092d", "key": "pluginID"}, {"hash": "550b4f0cc4e5adba1137421fd96315c6", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "43a3ec56ec636b53af6d97a47899295c", "key": "naslFamily"}, {"hash": "6abaf77c01dc0fdf47fdaee14180268e", "key": "description"}, {"hash": "97ea87d6e8ef74740a53e944a5d5c86d", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=54862", "id": "SLACKWARE_SSA_2003-253-01.NASL", "lastseen": "2016-09-26T17:23:23", "modified": "2013-06-01T00:00:00", "naslFamily": "Slackware Local Security Checks", "objectVersion": "1.2", "pluginID": "54862", "published": "2011-05-28T00:00:00", "references": ["http://www.nessus.org/u?12babf6d"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2003-253-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(54862);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2013/06/01 00:36:12 $\");\n\n script_osvdb_id(9003);\n script_xref(name:\"SSA\", value:\"2003-253-01\");\n\n script_name(english:\"Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which\ncould lead to arbitrary code execution when a specially crafted email\nis processed by Pine. This problem is fixed in Pine 4.58. Sites which\nuse the Pine mail reader should upgrade.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2003&m=slackware-security.347016\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?12babf6d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected pine package.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:pine\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:9.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2003/09/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/05/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2003/09/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2013 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"8.1\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"9.0\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i486\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "title": "Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)", "type": "nessus", "viewCount": 0}, "differentElements": ["cpe"], "edition": 1, "lastseen": "2016-09-26T17:23:23"}], "edition": 3, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "e1899552cf0895295aa87ab4300f4473"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "6abaf77c01dc0fdf47fdaee14180268e"}, {"key": "href", "hash": "11321bbe3ac9e1c95903acaac9b91167"}, {"key": "modified", "hash": "a03d359fb0b4e439f50091cee1f89df6"}, {"key": "naslFamily", "hash": "43a3ec56ec636b53af6d97a47899295c"}, {"key": "pluginID", "hash": "01393c6508393b2e45aa397eca03092d"}, {"key": "published", "hash": "8a9ae066bb2cd6cc945fcd802e204892"}, {"key": "references", "hash": "21dfa4bec1703bba45066edf0f4da915"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "cd080862e5f9e18d3adac8c00b26a129"}, {"key": "title", "hash": "550b4f0cc4e5adba1137421fd96315c6"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "a9708e274d249640ae13e6bbac165ca83bd021d207813bdb61be4ba8aedb2076", "viewCount": 0, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2003-253-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(54862);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/08/09 17:06:37\");\n\n script_xref(name:\"SSA\", value:\"2003-253-01\");\n\n script_name(english:\"Slackware 8.1 / 9.0 / current : security issues in pine (SSA:2003-253-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Upgraded pine packages are available for Slackware 8.1, 9.0 and -\n-current. These fix two security problems found by iDEFENSE Labs which\ncould lead to arbitrary code execution when a specially crafted email\nis processed by Pine. This problem is fixed in Pine 4.58. Sites which\nuse the Pine mail reader should upgrade.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2003&m=slackware-security.347016\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?12babf6d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected pine package.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:pine\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:9.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2003/09/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/05/28\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2003/09/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"8.1\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"9.0\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i386\", pkgnum:\"1\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"pine\", pkgver:\"4.58\", pkgarch:\"i486\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "naslFamily": "Slackware Local Security Checks", "pluginID": "54862", "cpe": ["p-cpe:/a:slackware:slackware_linux:pine", "cpe:/o:slackware:slackware_linux:8.1", "cpe:/o:slackware:slackware_linux:9.0", "cpe:/o:slackware:slackware_linux"]}

{}