Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2010-2018 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-624-2.NASL
HistoryApr 09, 2010 - 12:00 a.m.

Ubuntu 9.10 : erlang vulnerability (USN-624-2)

2010-04-0900:00:00
Ubuntu Security Notice (C) 2010-2018 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
15
JSON

USN-624-1 fixed a vulnerability in PCRE. This update provides the corresponding update for Erlang.

Tavis Ormandy discovered that the PCRE library did not correctly handle certain in-pattern options. An attacker could cause applications linked against pcre3 to crash, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-624-2. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include("compat.inc");

if (description)
{
  script_id(45473);
  script_version("1.11");
  script_cvs_date("Date: 2018/11/28 11:42:05");

  script_cve_id("CVE-2008-2371");
  script_xref(name:"USN", value:"624-2");

  script_name(english:"Ubuntu 9.10 : erlang vulnerability (USN-624-2)");
  script_summary(english:"Checks dpkg output for updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Ubuntu host is missing one or more security-related
patches."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"USN-624-1 fixed a vulnerability in PCRE. This update provides the
corresponding update for Erlang.

Tavis Ormandy discovered that the PCRE library did not correctly
handle certain in-pattern options. An attacker could cause
applications linked against pcre3 to crash, leading to a denial of
service.

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://usn.ubuntu.com/624-2/"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(119);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-appmon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-asn1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-base-hipe");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-common-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-corba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-crypto");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-debugger");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-dialyzer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-docbuilder");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-edoc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-eunit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-examples");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-gs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-ic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-inets");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-inviso");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-megaco");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-mnesia");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-mode");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-nox");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-observer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-odbc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-os-mon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-parsetools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-percept");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-pman");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-public-key");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-reltool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-runtime-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-src");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-ssh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-ssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-syntax-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-test-server");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-toolbar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-tv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-typer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-webtool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-x11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang-xmerl");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:9.10");

  script_set_attribute(attribute:"patch_publication_date", value:"2010/04/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2010/04/09");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"Ubuntu Security Notice (C) 2010-2018 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Ubuntu Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("ubuntu.inc");
include("misc_func.inc");

if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/Ubuntu/release");
if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
release = chomp(release);
if (! ereg(pattern:"^(9\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 9.10", "Ubuntu " + release);
if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);

flag = 0;

if (ubuntu_check(osver:"9.10", pkgname:"erlang", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-appmon", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-asn1", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-base", pkgver:"1:13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-base-hipe", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-common-test", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-corba", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-crypto", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-debugger", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-dev", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-dialyzer", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-docbuilder", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-edoc", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-et", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-eunit", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-examples", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-gs", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-ic", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-inets", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-inviso", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-megaco", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-mnesia", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-mode", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-nox", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-observer", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-odbc", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-os-mon", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-parsetools", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-percept", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-pman", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-public-key", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-reltool", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-runtime-tools", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-snmp", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-src", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-ssh", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-ssl", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-syntax-tools", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-test-server", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-toolbar", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-tools", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-tv", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-typer", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-webtool", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-x11", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;
if (ubuntu_check(osver:"9.10", pkgname:"erlang-xmerl", pkgver:"13.b.1-dfsg-2ubuntu1.1")) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "erlang / erlang-appmon / erlang-asn1 / erlang-base / etc");
}
VendorProductVersionCPE
canonicalubuntu_linuxerlangp-cpe:/a:canonical:ubuntu_linux:erlang
canonicalubuntu_linuxerlang-appmonp-cpe:/a:canonical:ubuntu_linux:erlang-appmon
canonicalubuntu_linuxerlang-asn1p-cpe:/a:canonical:ubuntu_linux:erlang-asn1
canonicalubuntu_linuxerlang-basep-cpe:/a:canonical:ubuntu_linux:erlang-base
canonicalubuntu_linuxerlang-base-hipep-cpe:/a:canonical:ubuntu_linux:erlang-base-hipe
canonicalubuntu_linuxerlang-common-testp-cpe:/a:canonical:ubuntu_linux:erlang-common-test
canonicalubuntu_linuxerlang-corbap-cpe:/a:canonical:ubuntu_linux:erlang-corba
canonicalubuntu_linuxerlang-cryptop-cpe:/a:canonical:ubuntu_linux:erlang-crypto
canonicalubuntu_linuxerlang-debuggerp-cpe:/a:canonical:ubuntu_linux:erlang-debugger
canonicalubuntu_linuxerlang-devp-cpe:/a:canonical:ubuntu_linux:erlang-dev
Rows per page:
1-10 of 471

Related

fedora 4
nessus 18
osv 1
gentoo 2
openvas 38
seebug 2
securityvulns 5
slackware 1
debian 1
prion 1
ubuntu 3
debiancve 1
ubuntucve 1
cve 1
freebsd 1
fedora
fedora
[SECURITY] Fedora 9 Update: glib2-2.16.4-1.fc9
2008-07-03 03:16:40
[SECURITY] Fedora 8 Update: glib2-2.14.6-2.fc8
2008-07-03 03:14:39
[SECURITY] Fedora 9 Update: pcre-7.3-4.fc9
2008-07-06 06:11:43
nessus
nessus
Fedora 8 : glib2-2.14.6-2.fc8 (2008-6025)
2008-07-08 00:00:00
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : pcre3 vulnerability (USN-624-1)
2008-07-15 00:00:00
Slackware 12.0 / 12.1 / current : pcre (SSA:2008-210-09)
2008-07-29 00:00:00
osv
osv
pcre3 - arbitrary code execution
2008-07-05 00:00:00
gentoo
gentoo
PCRE: Buffer overflow
2008-07-07 00:00:00
PHP: Multiple vulnerabilities
2008-11-16 00:00:00
openvas
openvas
Fedora Update for glib2 FEDORA-2008-6025
2009-02-17 00:00:00
Ubuntu: Security Advisory (USN-624-1)
2009-03-23 00:00:00
Slackware Advisory SSA:2008-210-09 pcre
2012-09-11 00:00:00
seebug
seebug
PCRE θ§„εˆ™θ‘¨θΎΎεΌε †ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2008-07-08 00:00:00
PCRE pcre_compile.cζ–‡δ»Άε †ζΊ’ε‡ΊζΌζ΄ž
2008-07-07 00:00:00
securityvulns
securityvulns
PCRE library buffer overflow
2008-07-07 00:00:00
PCRE buffer overflow
2008-07-18 00:00:00
[SECURITY] [DSA 1602-1] New pcre3 packages fix arbitrary code execution
2008-07-07 00:00:00
slackware
slackware
[slackware-security] pcre
2008-07-29 05:34:14
debian
debian
[SECURITY] [DSA 1602-1] New pcre3 packages fix arbitrary code execution
2008-07-05 12:37:12
prion
prion
Heap overflow
2008-07-07 23:41:00
ubuntu
ubuntu
PCRE vulnerability
2008-07-15 00:00:00
Erlang vulnerability
2010-04-09 00:00:00
PHP vulnerabilities
2008-07-23 00:00:00
debiancve
debiancve
CVE-2008-2371
2008-07-07 23:41:00
ubuntucve
ubuntucve
CVE-2008-2371
2008-07-07 00:00:00
cve
cve
CVE-2008-2371
2008-07-07 23:41:00
freebsd
freebsd
php -- multiple vulnerabilities
2008-12-04 00:00:00
JSON
Related for UBUNTU_USN-624-2.NASL
fedora4nessus18osv1gentoo2openvas38seebug2securityvulns5slackware1debian1prion1ubuntu3debiancve1ubuntucve1cve1freebsd1