Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2008-2019 Canonical, Inc. / NASL script (C) 2009-2018 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-677-1.NASL
HistoryApr 23, 2009 - 12:00 a.m.

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)

2009-04-2300:00:00
Ubuntu Security Notice (C) 2008-2019 Canonical, Inc. / NASL script (C) 2009-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
17
JSON

Multiple memory overflow flaws were discovered in OpenOffice.org’s handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. (CVE-2008-2237, CVE-2008-2238)

Dmitry E. Oboukhov discovered that senddoc, as included in OpenOffice.org, created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. This issue only affected Ubuntu 8.04 LTS. (CVE-2008-4937).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-677-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(36611);
  script_version("1.15");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2008-2237", "CVE-2008-2238", "CVE-2008-4937");
  script_bugtraq_id(31962);
  script_xref(name:"USN", value:"677-1");

  script_name(english:"Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)");
  script_summary(english:"Checks dpkg output for updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Ubuntu host is missing one or more security-related
patches."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Multiple memory overflow flaws were discovered in OpenOffice.org's
handling of WMF and EMF files. If a user were tricked into opening a
specially crafted document, a remote attacker might be able to execute
arbitrary code with user privileges. (CVE-2008-2237, CVE-2008-2238)

Dmitry E. Oboukhov discovered that senddoc, as included in
OpenOffice.org, created temporary files in an insecure way. Local
users could exploit a race condition to create or overwrite files with
the privileges of the user invoking the program. This issue only
affected Ubuntu 8.04 LTS. (CVE-2008-4937).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://usn.ubuntu.com/677-1/"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(59, 119);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:broffice.org");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:cli-uno-bridge");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libmythes-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libuno-cil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libuno-cli-basetypes1.0-cil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libuno-cli-cppuhelper1.0-cil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libuno-cli-types1.1-cil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libuno-cli-ure1.0-cil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:mozilla-openoffice.org");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-base-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-calc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-dev-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-draw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-dtd-officedocument1.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-emailmerge");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-evolution");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-filter-binfilter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-filter-mobiledev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-filter-so52");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-gcj");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-gnome");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-gtk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-gtk-gnome");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-headless");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-impress");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-java-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-kde");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-l10n-en-us");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-l10n-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-l10n-za");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-math");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-officebean");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-ogltrans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-presentation-minimizer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-qa-api-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-qa-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-report-builder");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-report-builder-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-sdbc-postgresql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-andromeda");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-crystal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-default");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-hicontrast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-human");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-industrial");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-style-tango");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-writer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-calc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-draw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-evolution");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-gnome");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-impress");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-kde");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-math");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org2-writer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:python-uno");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:ttf-opensymbol");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:ure");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:ure-dbg");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:6.06:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:7.10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:8.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:8.10");

  script_set_attribute(attribute:"patch_publication_date", value:"2008/11/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2009/04/23");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"Ubuntu Security Notice (C) 2008-2019 Canonical, Inc. / NASL script (C) 2009-2018 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Ubuntu Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("ubuntu.inc");
include("misc_func.inc");

if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/Ubuntu/release");
if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
release = chomp(release);
if (! ereg(pattern:"^(6\.06|7\.10|8\.04|8\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 6.06 / 7.10 / 8.04 / 8.10", "Ubuntu " + release);
if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);

flag = 0;

if (ubuntu_check(osver:"6.06", pkgname:"libmythes-dev", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-base", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-calc", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-common", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-core", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-dev", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-dev-doc", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-draw", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-evolution", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-filter-so52", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-gcj", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-gnome", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-gtk", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-gtk-gnome", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-impress", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-java-common", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-kde", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-l10n-en-us", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-math", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-officebean", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-qa-api-tests", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-qa-tools", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org-writer", pkgver:"2.0.2-2ubuntu12.7-2")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-base", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-calc", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-draw", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-evolution", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-gnome", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-impress", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-kde", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-math", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"openoffice.org2-writer", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"python-uno", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"6.06", pkgname:"ttf-opensymbol", pkgver:"2.0.2-2ubuntu12.7")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"broffice.org", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"libmythes-dev", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"libuno-cil", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"mozilla-openoffice.org", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-base", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-calc", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-common", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-core", pkgver:"1:2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-dev", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-dev-doc", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-draw", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-dtd-officedocument1.0", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-evolution", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-filter-binfilter", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-filter-mobiledev", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-gnome", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-gtk", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-headless", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-impress", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-java-common", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-kde", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-l10n-en-us", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-l10n-in", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-l10n-za", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-math", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-officebean", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-qa-api-tests", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-qa-tools", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-report-builder", pkgver:"1.0.0+OOo2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-sdbc-postgresql", pkgver:"0.7.5+OOo2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-andromeda", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-crystal", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-default", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-hicontrast", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-human", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-industrial", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-style-tango", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"openoffice.org-writer", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"python-uno", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"7.10", pkgname:"ttf-opensymbol", pkgver:"2.3.0-1ubuntu5.5")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"broffice.org", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"libmythes-dev", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"libuno-cil", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"mozilla-openoffice.org", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-base", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-base-core", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-calc", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-common", pkgver:"1:2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-core", pkgver:"1:2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-dev", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-dev-doc", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-draw", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-dtd-officedocument1.0", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-evolution", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-filter-binfilter", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-filter-mobiledev", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-gcj", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-gnome", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-gtk", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-headless", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-impress", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-java-common", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-kde", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-l10n-in", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-l10n-za", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-math", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-officebean", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-ogltrans", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-presentation-minimizer", pkgver:"1.0+OOo2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-qa-api-tests", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-qa-tools", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-report-builder", pkgver:"1.0.2+OOo2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-sdbc-postgresql", pkgver:"0.7.5+OOo2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-style-andromeda", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-style-crystal", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-style-hicontrast", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-style-human", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-style-industrial", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-style-tango", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"openoffice.org-writer", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"python-uno", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"ttf-opensymbol", pkgver:"2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"ure", pkgver:"1.4+OOo2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.04", pkgname:"ure-dbg", pkgver:"1.4+OOo2.4.1-1ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"broffice.org", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"cli-uno-bridge", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"libmythes-dev", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"libuno-cli-basetypes1.0-cil", pkgver:"1.0.10.0+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"libuno-cli-cppuhelper1.0-cil", pkgver:"1.0.13.0+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"libuno-cli-types1.1-cil", pkgver:"1.1.13.0+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"libuno-cli-ure1.0-cil", pkgver:"1.0.13.0+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"mozilla-openoffice.org", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-base", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-base-core", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-calc", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-common", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-core", pkgver:"1:2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-dev", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-dev-doc", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-draw", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-dtd-officedocument1.0", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-emailmerge", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-evolution", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-filter-binfilter", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-filter-mobiledev", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-gcj", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-gnome", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-gtk", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-headless", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-impress", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-java-common", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-kde", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-l10n-in", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-l10n-za", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-math", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-officebean", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-ogltrans", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-presentation-minimizer", pkgver:"1.0+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-qa-api-tests", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-qa-tools", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-report-builder", pkgver:"1.0.2+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-report-builder-bin", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-sdbc-postgresql", pkgver:"0.7.5+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-style-andromeda", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-style-crystal", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-style-hicontrast", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-style-human", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-style-industrial", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-style-tango", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"openoffice.org-writer", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"python-uno", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"ttf-opensymbol", pkgver:"2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"ure", pkgver:"1.4+OOo2.4.1-11ubuntu2.1")) flag++;
if (ubuntu_check(osver:"8.10", pkgname:"ure-dbg", pkgver:"1.4+OOo2.4.1-11ubuntu2.1")) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "broffice.org / cli-uno-bridge / libmythes-dev / libuno-cil / etc");
}
VendorProductVersionCPE
canonicalubuntu_linuxbroffice.orgp-cpe:/a:canonical:ubuntu_linux:broffice.org
canonicalubuntu_linuxcli-uno-bridgep-cpe:/a:canonical:ubuntu_linux:cli-uno-bridge
canonicalubuntu_linuxlibmythes-devp-cpe:/a:canonical:ubuntu_linux:libmythes-dev
canonicalubuntu_linuxlibuno-cilp-cpe:/a:canonical:ubuntu_linux:libuno-cil
canonicalubuntu_linuxlibuno-cli-basetypes1.0-cilp-cpe:/a:canonical:ubuntu_linux:libuno-cli-basetypes1.0-cil
canonicalubuntu_linuxlibuno-cli-cppuhelper1.0-cilp-cpe:/a:canonical:ubuntu_linux:libuno-cli-cppuhelper1.0-cil
canonicalubuntu_linuxlibuno-cli-types1.1-cilp-cpe:/a:canonical:ubuntu_linux:libuno-cli-types1.1-cil
canonicalubuntu_linuxlibuno-cli-ure1.0-cilp-cpe:/a:canonical:ubuntu_linux:libuno-cli-ure1.0-cil
canonicalubuntu_linuxmozilla-openoffice.orgp-cpe:/a:canonical:ubuntu_linux:mozilla-openoffice.org
canonicalubuntu_linuxopenoffice.orgp-cpe:/a:canonical:ubuntu_linux:openoffice.org
Rows per page:
1-10 of 701

Related

nessus 18
openvas 33
ubuntu 2
gentoo 1
debian 4
osv 1
centos 1
oraclelinux 1
redhat 1
seebug 1
freebsd 1
fedora 2
cve 5
ubuntucve 5
prion 5
checkpoint_advisories 1
securityvulns 2
veracode 2
nessus
nessus
Ubuntu 8.04 LTS : openoffice.org-l10n update (USN-677-2)
2009-04-23 00:00:00
GLSA-200812-13 : OpenOffice.org: Multiple vulnerabilities
2008-12-15 00:00:00
openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-5738)
2008-11-21 00:00:00
openvas
openvas
Ubuntu Update for openoffice.org, openoffice.org-amd64 vulnerabilities USN-677-1
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-677-2)
2008-12-29 00:00:00
Gentoo Security Advisory GLSA 200812-13 (openoffice openoffice-bin)
2008-12-23 00:00:00
ubuntu
ubuntu
OpenOffice.org Internationalization update
2008-12-23 00:00:00
OpenOffice.org vulnerabilities
2008-11-26 00:00:00
gentoo
gentoo
OpenOffice.org: Multiple vulnerabilities
2008-12-12 00:00:00
debian
debian
[SECURITY] [DSA 1661-1] New OpenOffice.org packages fix several vulnerabilities
2008-10-29 18:16:58
[Backports-security-announce] Security update for openoffice.org
2008-10-30 10:37:01
[Backports-security-announce] Security update for openoffice.org
2008-10-30 10:37:01
osv
osv
openoffice.org - several vulnerabilities
2008-10-29 00:00:00
centos
centos
openoffice.org security update
2008-11-05 18:54:09
oraclelinux
oraclelinux
openoffice.org security update
2008-11-05 00:00:00
redhat
redhat
(RHSA-2008:0939) Important: openoffice.org security update
2008-11-05 00:00:00
seebug
seebug
OpenOffice WMF和EMF文件处理堆缓冲区溢出漏洞
2008-10-31 00:00:00
freebsd
freebsd
openoffice -- arbitrary code execution vulnerabilities
2008-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: openoffice.org-2.4.2-18.1.fc9
2008-10-31 10:24:00
[SECURITY] Fedora 8 Update: openoffice.org-2.3.0-6.17.fc8
2008-10-31 10:27:14
cve
cve
CVE-2008-4937
2008-11-05 15:00:00
CVE-2008-2238
2008-10-30 20:00:00
CVE-2008-2237
2008-10-30 20:00:00
ubuntucve
ubuntucve
CVE-2008-4937
2008-11-05 00:00:00
CVE-2008-2238
2008-10-30 00:00:00
CVE-2008-2237
2008-10-30 00:00:00
prion
prion
Arbitrary file deletion
2008-11-05 15:00:00
Integer overflow
2008-10-30 20:00:00
Heap overflow
2008-10-30 20:00:00
checkpoint_advisories
checkpoint_advisories
OpenOffice EMF File EMR Record Parsing Integer Overflow (CVE-2008-2238)
2010-06-16 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 10.31.08: OpenOffice EMF Record Parsing Multiple Integer Overflow Vulnerabilities
2008-11-02 00:00:00
OpenOffice integer overflow
2008-11-02 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:29:33
Arbitrary Code Execution
2020-04-10 00:29:32
JSON
Related for UBUNTU_USN-677-1.NASL
nessus18openvas33ubuntu2gentoo1debian4osv1centos1oraclelinux1redhat1seebug1freebsd1fedora2cve5ubuntucve5prion5checkpoint_advisories1securityvulns2veracode2