Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2004-2019 Canonical, Inc. / NASL script (C) 2006-2016 Tenable Network Security, Inc.UBUNTU_USN-27-1.NASL
HistoryJan 15, 2006 - 12:00 a.m.

Ubuntu 4.10 : libxpm4 vulnerability (USN-27-1)

2006-01-1500:00:00
Ubuntu Security Notice (C) 2004-2019 Canonical, Inc. / NASL script (C) 2006-2016 Tenable Network Security, Inc.
www.tenable.com
11
JSON

Chris Evans discovered several stack overflows in the versions of libXpm shipped by X.Org, XFree86, and LessTif. These overflows were fixed in the Warty development tree before its release. Mathieu Herrb of OpenBSD subsequently discovered that the original patch was insufficient to address these overflows, and thus the version of libxpm4 shipped with Warty is still vulnerable to the original overflows.

These overflows do not allow privilege escalation through the X server; the overflows are in a client-side library, allowing arbitrary code execution with the privileges of the user viewing a malicious pixmap.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#%NASL_MIN_LEVEL 70300

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-27-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(20642);
  script_version("1.16");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2004-0687", "CVE-2004-0688");
  script_xref(name:"USN", value:"27-1");

  script_name(english:"Ubuntu 4.10 : libxpm4 vulnerability (USN-27-1)");
  script_summary(english:"Checks dpkg output for updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Ubuntu host is missing one or more security-related
patches."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Chris Evans discovered several stack overflows in the versions of
libXpm shipped by X.Org, XFree86, and LessTif. These overflows were
fixed in the Warty development tree before its release. Mathieu Herrb
of OpenBSD subsequently discovered that the original patch was
insufficient to address these overflows, and thus the version of
libxpm4 shipped with Warty is still vulnerable to the original
overflows.

These overflows do not allow privilege escalation through the X
server; the overflows are in a client-side library, allowing arbitrary
code execution with the privileges of the user viewing a malicious
pixmap.

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:lbxproxy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdps-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdps1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdps1-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libice-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libice6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libice6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libsm-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libsm6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libsm6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libx11-6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libx11-6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libx11-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxaw6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxaw6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxaw6-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxaw7");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxaw7-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxaw7-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxext-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxext6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxext6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxft1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxft1-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxi-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxi6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxi6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxmu-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxmu6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxmu6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxmuu-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxmuu1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxmuu1-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxp-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxp6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxp6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxpm-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxpm4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxpm4-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxrandr-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxrandr2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxrandr2-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxt-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxt6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxt6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxtrap-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxtrap6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxtrap6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxtst-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxtst6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxtst6-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxv-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxv1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxv1-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pm-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:proxymngr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:twm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:x-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:x-window-system");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:x-window-system-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:x-window-system-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xbase-clients");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xdm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-100dpi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-100dpi-transcoded");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-75dpi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-75dpi-transcoded");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-base-transcoded");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-cyrillic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfonts-scalable");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfree86-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xfwp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-dri");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-dri-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-gl-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-gl-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-glu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-glu-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa-glu-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibmesa3-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibosmesa-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibosmesa4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibosmesa4-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs-pic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs-static-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xlibs-static-pic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xmh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xnest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xprt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xserver-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xserver-xfree86");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xserver-xfree86-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xspecs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xterm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xvfb");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:4.10");

  script_set_attribute(attribute:"patch_publication_date", value:"2004/11/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/01/15");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"Ubuntu Security Notice (C) 2004-2019 Canonical, Inc. / NASL script (C) 2006-2016 Tenable Network Security, Inc.");
  script_family(english:"Ubuntu Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("ubuntu.inc");
include("misc_func.inc");

if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/Ubuntu/release");
if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
release = chomp(release);
if (! ereg(pattern:"^(4\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 4.10", "Ubuntu " + release);
if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);

flag = 0;

if (ubuntu_check(osver:"4.10", pkgname:"lbxproxy", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libdps-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libdps1", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libdps1-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libice-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libice6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libice6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libsm-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libsm6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libsm6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libx11-6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libx11-6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libx11-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxaw6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxaw6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxaw6-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxaw7", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxaw7-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxaw7-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxext-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxext6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxext6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxft1", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxft1-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxi-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxi6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxi6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxmu-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxmu6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxmu6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxmuu-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxmuu1", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxmuu1-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxp-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxp6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxp6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxpm-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxpm4", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxpm4-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxrandr-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxrandr2", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxrandr2-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxt-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxt6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxt6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxtrap-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxtrap6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxtrap6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxtst-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxtst6", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxtst6-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxv-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxv1", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"libxv1-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"pm-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"proxymngr", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"twm", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"x-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"x-window-system", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"x-window-system-core", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"x-window-system-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xbase-clients", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xdm", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-100dpi", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-100dpi-transcoded", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-75dpi", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-75dpi-transcoded", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-base", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-base-transcoded", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-cyrillic", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfonts-scalable", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfree86-common", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfs", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xfwp", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-dri", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-dri-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-gl", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-gl-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-gl-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-glu", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-glu-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa-glu-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa3", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibmesa3-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibosmesa-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibosmesa4", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibosmesa4-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs-data", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs-pic", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs-static-dev", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xlibs-static-pic", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xmh", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xnest", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xprt", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xserver-common", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xserver-xfree86", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xserver-xfree86-dbg", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xspecs", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xterm", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xutils", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;
if (ubuntu_check(osver:"4.10", pkgname:"xvfb", pkgver:"4.3.0.dfsg.1-6ubuntu25.1")) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "lbxproxy / libdps-dev / libdps1 / libdps1-dbg / libice-dev / etc");
}
VendorProductVersionCPE
canonicalubuntu_linuxlibxmuu-devp-cpe:/a:canonical:ubuntu_linux:libxmuu-dev
canonicalubuntu_linuxlibxmuu1p-cpe:/a:canonical:ubuntu_linux:libxmuu1
canonicalubuntu_linuxlibxmuu1-dbgp-cpe:/a:canonical:ubuntu_linux:libxmuu1-dbg
canonicalubuntu_linuxlibxp-devp-cpe:/a:canonical:ubuntu_linux:libxp-dev
canonicalubuntu_linuxlibxp6p-cpe:/a:canonical:ubuntu_linux:libxp6
canonicalubuntu_linuxlibxp6-dbgp-cpe:/a:canonical:ubuntu_linux:libxp6-dbg
canonicalubuntu_linuxlibxpm-devp-cpe:/a:canonical:ubuntu_linux:libxpm-dev
canonicalubuntu_linuxlibxpm4p-cpe:/a:canonical:ubuntu_linux:libxpm4
canonicalubuntu_linuxlibxpm4-dbgp-cpe:/a:canonical:ubuntu_linux:libxpm4-dbg
canonicalubuntu_linuxlibxrandr-devp-cpe:/a:canonical:ubuntu_linux:libxrandr-dev
Rows per page:
1-10 of 1061

Related

nessus 22
openvas 23
debian 4
osv 2
freebsd 2
cert 2
gentoo 3
ubuntu 1
redhat 5
ubuntucve 4
cve 4
debiancve 2
packetstorm 1
zdt 1
securityvulns 1
suse 1
nessus
nessus
HP-UX PHSS_33132 : HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS) (HPSBUX02119 SSRT4848 rev.1)
2006-06-06 00:00:00
Debian DSA-560-1 : lesstif1-1 - integer and stack overflows
2004-11-10 00:00:00
HP-UX PHSS_33130 : HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS) (HPSBUX02119 SSRT4848 rev.1)
2006-06-06 00:00:00
openvas
openvas
Debian Security Advisory DSA 560-1 (lesstif1-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 561-1 (xfree86)
2008-01-17 00:00:00
SLES9: Security update for OpenMotif
2009-10-10 00:00:00
debian
debian
[SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities
2004-10-07 13:32:27
[SECURITY] [DSA 561-1] New libxpm packages fix several vulnerabilities
2004-10-11 07:42:09
[SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities
2004-10-07 13:32:27
osv
osv
xfree86 - integer and stack overflows
2004-10-11 00:00:00
lesstif1-1 - integer and stack overflows
2004-10-07 00:00:00
freebsd
freebsd
xpm -- image decoding vulnerabilities
2004-09-15 00:00:00
linux_base -- vulnerabilities in Red Hat 7.1 libraries
2004-09-27 00:00:00
cert
cert
libXpm library contains multiple integer overflow vulnerabilities
2004-09-30 00:00:00
libXpm image library vulnerable to buffer overflow
2004-09-30 00:00:00
gentoo
gentoo
X.org, XFree86: Integer and stack overflows in libXpm
2004-09-27 00:00:00
LessTif: Integer and stack overflows in libXpm
2004-10-09 00:00:00
OpenMotif: Multiple vulnerabilities in libXpm
2005-02-07 00:00:00
ubuntu
ubuntu
libxpm4 vulnerability
2004-11-18 00:00:00
redhat
redhat
(RHSA-2004:479) XFree86 security update
2004-10-06 00:00:00
(RHSA-2005:004) lesstif security update
2005-01-12 00:00:00
(RHSA-2004:537) openmotif security update
2004-12-02 00:00:00
ubuntucve
ubuntucve
CVE-2004-0688
2004-10-20 00:00:00
CVE-2004-0687
2004-10-20 00:00:00
CVE-2004-0783
2004-10-20 00:00:00
cve
cve
CVE-2004-0687
2004-10-20 04:00:00
CVE-2004-0688
2004-10-20 04:00:00
CVE-2004-0782
2004-10-20 04:00:00
debiancve
debiancve
CVE-2004-0783
2004-10-20 04:00:00
CVE-2004-0782
2004-10-20 04:00:00
packetstorm
packetstorm
Solaris 10 dtprintinfo / libXm / libXpm Security Issues
2023-01-20 00:00:00
zdt
zdt
Solaris 10 dtprintinfo / libXm / libXpm Security Issues Vulnerability
2023-01-22 00:00:00
securityvulns
securityvulns
US-CERT Technical Cyber Security Alert TA05-136A -- Apple Mac OS X is affected by multiple vulnerabilities
2005-05-17 00:00:00
suse
suse
remote command execution in XFree86-libs, xshared
2004-09-17 13:37:17
JSON
Related for UBUNTU_USN-27-1.NASL
nessus22openvas23debian4osv2freebsd2cert2gentoo3ubuntu1redhat5ubuntucve4cve4debiancve2packetstorm1zdt1securityvulns1suse1