#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# This plugin text was extracted from SuSE Security Advisory SUSE-SA:2005:015
#
if ( ! defined_func("bn_random") ) exit(0);
include('deprecated_nasl_level.inc');
include('compat.inc');
if(description)
{
script_id(17325);
script_version("1.8");
name["english"] = "SUSE-SA:2005:015: openslp";
script_name(english:name["english"]);
script_set_attribute(attribute:"synopsis", value:
"The remote host is missing a vendor-supplied security patch" );
script_set_attribute(attribute:"description", value:
"The remote host is missing the patch for the advisory SUSE-SA:2005:015 (openslp).
The SUSE Security Team reviewed critical parts of the OpenSLP package,
an open source implementation of the Service Location Protocol (SLP).
SLP is used by Desktops to locate certain services such as printers and
by servers to announce their services.
During the audit, various buffer overflows and out of bounds memory access
have been fixed which can be triggered by remote attackers by sending
malformed SLP packets." );
script_set_attribute(attribute:"solution", value:
"http://www.suse.de/security/advisories/2005_15_openslp.html" );
script_set_attribute(attribute:"risk_factor", value:"Medium" );
script_set_attribute(attribute:"plugin_publication_date", value: "2005/03/15");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/14");
script_end_attributes();
summary["english"] = "Check for the version of the openslp package";
script_summary(english:summary["english"]);
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2005-2021 Tenable Network Security, Inc.");
family["english"] = "SuSE Local Security Checks";
script_family(english:family["english"]);
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/SuSE/rpm-list");
exit(0);
}
include("rpm.inc");
if ( rpm_check( reference:"openslp-1.1.5-73.15", release:"SUSE9.1") )
{
security_warning(0);
exit(0);
}
if ( rpm_check( reference:"openslp-server-1.1.5-73.15", release:"SUSE9.1") )
{
security_warning(0);
exit(0);
}
if ( rpm_check( reference:"openslp-devel-1.1.5-73.15", release:"SUSE9.1") )
{
security_warning(0);
exit(0);
}
if ( rpm_check( reference:"openslp-1.1.5-80.4", release:"SUSE9.2") )
{
security_warning(0);
exit(0);
}
if ( rpm_check( reference:"openslp-server-1.1.5-80.4", release:"SUSE9.2") )
{
security_warning(0);
exit(0);
}
if ( rpm_check( reference:"openslp-devel-1.1.5-80.4", release:"SUSE9.2") )
{
security_warning(0);
exit(0);
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation