ID OPENVAS:1361412562310122373 Type openvas Reporter Eero Volotinen Modified 2018-09-28T00:00:00
Description
Oracle Linux Local Security Checks ELSA-2010-0181
###############################################################################
# OpenVAS Vulnerability Test
# $Id: ELSA-2010-0181.nasl 11688 2018-09-28 13:36:28Z cfischer $
#
# Oracle Linux Local Check
#
# Authors:
# Eero Volotinen <eero.volotinen@solinor.com>
#
# Copyright:
# Copyright (c) 2015 Eero Volotinen, http://solinor.com
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.122373");
script_version("$Revision: 11688 $");
script_tag(name:"creation_date", value:"2015-10-06 14:17:43 +0300 (Tue, 06 Oct 2015)");
script_tag(name:"last_modification", value:"$Date: 2018-09-28 15:36:28 +0200 (Fri, 28 Sep 2018) $");
script_name("Oracle Linux Local Check: ELSA-2010-0181");
script_tag(name:"insight", value:"ELSA-2010-0181 - brltty security and bug fix update. Please see the references for more insight.");
script_tag(name:"solution", value:"Update the affected packages to the latest available version.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"summary", value:"Oracle Linux Local Security Checks ELSA-2010-0181");
script_xref(name:"URL", value:"http://linux.oracle.com/errata/ELSA-2010-0181.html");
script_cve_id("CVE-2008-3279");
script_tag(name:"cvss_base", value:"6.9");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:M/Au:N/C:C/I:C/A:C");
script_tag(name:"qod_type", value:"package");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/oracle_linux", "ssh/login/release", re:"ssh/login/release=OracleLinux5");
script_category(ACT_GATHER_INFO);
script_copyright("Eero Volotinen");
script_family("Oracle Linux Local Security Checks");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release) exit(0);
res = "";
if(release == "OracleLinux5")
{
if ((res = isrpmvuln(pkg:"brlapi", rpm:"brlapi~0.4.1~4.el5", rls:"OracleLinux5")) != NULL) {
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"brlapi-devel", rpm:"brlapi-devel~0.4.1~4.el5", rls:"OracleLinux5")) != NULL) {
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"brltty", rpm:"brltty~3.7.2~4.el5", rls:"OracleLinux5")) != NULL) {
security_message(data:res);
exit(0);
}
}
if (__pkg_match) exit(99);
exit(0);
{"id": "OPENVAS:1361412562310122373", "type": "openvas", "bulletinFamily": "scanner", "title": "Oracle Linux Local Check: ELSA-2010-0181", "description": "Oracle Linux Local Security Checks ELSA-2010-0181", "published": "2015-10-06T00:00:00", "modified": "2018-09-28T00:00:00", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122373", "reporter": "Eero Volotinen", "references": ["http://linux.oracle.com/errata/ELSA-2010-0181.html"], "cvelist": ["CVE-2008-3279"], "lastseen": "2019-05-29T18:36:04", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2008-3279"]}, {"type": "oraclelinux", "idList": ["ELSA-2010-0181"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310830991", "OPENVAS:830910", "OPENVAS:870246", "OPENVAS:1361412562310870246", "OPENVAS:1361412562310830910", "OPENVAS:830991"]}, {"type": "nessus", "idList": ["MANDRIVA_MDVSA-2010-080.NASL", "SL_20100330_BRLTTY_ON_SL5_X.NASL", "REDHAT-RHSA-2010-0181.NASL"]}, {"type": "redhat", "idList": ["RHSA-2010:0181"]}], "modified": "2019-05-29T18:36:04", "rev": 2}, "score": {"value": 6.3, "vector": "NONE", "modified": "2019-05-29T18:36:04", "rev": 2}, "vulnersScore": 6.3}, "pluginID": "1361412562310122373", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: ELSA-2010-0181.nasl 11688 2018-09-28 13:36:28Z cfischer $\n#\n# Oracle Linux Local Check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.122373\");\n script_version(\"$Revision: 11688 $\");\n script_tag(name:\"creation_date\", value:\"2015-10-06 14:17:43 +0300 (Tue, 06 Oct 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 15:36:28 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Oracle Linux Local Check: ELSA-2010-0181\");\n script_tag(name:\"insight\", value:\"ELSA-2010-0181 - brltty security and bug fix update. Please see the references for more insight.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"summary\", value:\"Oracle Linux Local Security Checks ELSA-2010-0181\");\n script_xref(name:\"URL\", value:\"http://linux.oracle.com/errata/ELSA-2010-0181.html\");\n script_cve_id(\"CVE-2008-3279\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\", re:\"ssh/login/release=OracleLinux5\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Eero Volotinen\");\n script_family(\"Oracle Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"OracleLinux5\")\n{\n if ((res = isrpmvuln(pkg:\"brlapi\", rpm:\"brlapi~0.4.1~4.el5\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"brlapi-devel\", rpm:\"brlapi-devel~0.4.1~4.el5\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"brltty\", rpm:\"brltty~3.7.2~4.el5\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n\n}\nif (__pkg_match) exit(99);\n exit(0);\n\n", "naslFamily": "Oracle Linux Local Security Checks"}
{"cve": [{"lastseen": "2021-02-02T05:35:15", "description": "Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.\nPer: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'", "edition": 4, "cvss3": {}, "published": "2010-04-05T15:30:00", "title": "CVE-2008-3279", "type": "cve", "cwe": ["CWE-264"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.4, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 6.9, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2008-3279"], "modified": "2017-09-29T01:31:00", "cpe": ["cpe:/a:mielke:brltty:3.7.2"], "id": "CVE-2008-3279", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3279", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:mielke:brltty:3.7.2:*:*:*:*:*:*:*"]}], "openvas": [{"lastseen": "2018-01-18T11:05:06", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "description": "Check for the Version of brltty", "modified": "2018-01-17T00:00:00", "published": "2010-04-06T00:00:00", "id": "OPENVAS:1361412562310870246", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310870246", "type": "openvas", "title": "RedHat Update for brltty RHSA-2010:0181-05", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for brltty RHSA-2010:0181-05\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"brltty (Braille TTY) is a background process (daemon) which provides access\n to the Linux console (when in text mode) for a blind person using a\n refreshable braille display. It drives the braille display, and provides\n complete screen review functionality.\n\n It was discovered that a brltty library had an insecure relative RPATH\n (runtime library search path) set in the ELF (Executable and Linking\n Format) header. A local user able to convince another user to run an\n application using brltty in an attacker-controlled directory, could run\n arbitrary code with the privileges of the victim. (CVE-2008-3279)\n \n These updated packages also provide fixes for the following bugs:\n \n * the brltty configuration file is documented in the brltty manual page,\n but there is no separate manual page for the /etc/brltty.conf configuration\n file: running "man brltty.conf" returned "No manual entry for brltty.conf"\n rather than opening the brltty manual entry. This update adds brltty.conf.5\n as an alias to the brltty manual page. Consequently, running "man\n brltty.conf" now opens the manual entry documenting the brltty.conf\n specification. (BZ#530554)\n \n * previously, the brltty-pm.conf configuration file was installed in the\n /etc/brltty/ directory. This file, which configures Papenmeier Braille\n Terminals for use with Red Hat Enterprise Linux, is optional. As well, it\n did not come with a corresponding manual page. With this update, the file\n has been moved to /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/.\n This directory also includes a README document that explains the file's\n purpose and format. (BZ#530554)\n \n * during the brltty packages installation, the message\n \n Creating screen inspection device /dev/vcsa...done.\n \n was presented at the console. This was inadequate, especially during the\n initial install of the system. These updated packages do not send any\n message to the console during installation. (BZ#529163)\n \n * although brltty contains ELF objects, the brltty-debuginfo package was\n empty. With this update, the -debuginfo package contains valid debugging\n information as expected. (BZ#500545)\n \n * the MAX_NR_CONSOLES definition was acquired by brltty by #including\n linux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved to\n linux/vt.h but the #include in api_client.c was not updated. Consequently,\n brltty could not be built from the source RPM against the Red Hat\n Enterprise Linux 5 kernel. This update corrects the #include in\n api_client.c to linux/vt.h and brltty now builds from source as expected.\n (BZ#456247)\n \n All brltty users are advised to upgrade to these updated packages, which\n resolve these issues.\";\n\ntag_affected = \"brltty on Red Hat Enterprise Linux (v. 5 server)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2010-March/msg00030.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.870246\");\n script_version(\"$Revision: 8440 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-17 08:58:46 +0100 (Wed, 17 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2010-04-06 08:56:44 +0200 (Tue, 06 Apr 2010)\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"RHSA\", value: \"2010:0181-05\");\n script_cve_id(\"CVE-2008-3279\");\n script_name(\"RedHat Update for brltty RHSA-2010:0181-05\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of brltty\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_5\")\n{\n\n if ((res = isrpmvuln(pkg:\"brlapi\", rpm:\"brlapi~0.4.1~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"brlapi-devel\", rpm:\"brlapi-devel~0.4.1~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"brltty\", rpm:\"brltty~3.7.2~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"brltty-debuginfo\", rpm:\"brltty-debuginfo~3.7.2~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-26T11:05:17", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "description": "Check for the Version of brltty", "modified": "2018-01-25T00:00:00", "published": "2010-04-19T00:00:00", "id": "OPENVAS:1361412562310830991", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310830991", "type": "openvas", "title": "Mandriva Update for brltty MDVSA-2010:080 (brltty)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for brltty MDVSA-2010:080 (brltty)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"A vulnerability has been found and corrected in brltty:\n\n Untrusted search path vulnerability in libbrlttybba.so in brltty\n 3.7.2 allows local users to gain privileges via a crafted library,\n related to an incorrect RPATH setting (CVE-2008-3279).\n \n Packages for 2008.0 are provided for Corporate Desktop 2008.0\n customers.\n \n The updated packages have been patched to correct this issue.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\ntag_affected = \"brltty on Mandriva Linux 2008.0,\n Mandriva Linux 2008.0/X86_64\";\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.mandriva.com/security-announce/2010-04/msg00026.php\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.830991\");\n script_version(\"$Revision: 8528 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-25 08:57:36 +0100 (Thu, 25 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2010-04-19 16:47:49 +0200 (Mon, 19 Apr 2010)\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"MDVSA\", value: \"2010:080\");\n script_cve_id(\"CVE-2008-3279\");\n script_name(\"Mandriva Update for brltty MDVSA-2010:080 (brltty)\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of brltty\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"MNDK_2008.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"brltty\", rpm:\"brltty~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libbrlapi0.4.1_0\", rpm:\"libbrlapi0.4.1_0~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libbrlapi0.4.1_0-devel\", rpm:\"libbrlapi0.4.1_0-devel~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64brlapi0.4.1_0\", rpm:\"lib64brlapi0.4.1_0~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64brlapi0.4.1_0-devel\", rpm:\"lib64brlapi0.4.1_0-devel~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-23T13:05:07", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "description": "Check for the Version of python-qt4", "modified": "2018-01-23T00:00:00", "published": "2010-03-02T00:00:00", "id": "OPENVAS:1361412562310830910", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310830910", "type": "openvas", "title": "Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_affected = \"python-qt4 on Mandriva Linux 2009.1,\n Mandriva Linux 2009.1/X86_64\";\ntag_insight = \"python-qt4 packages released for Mandriva 2009.0 as update are\n in a higher version than python-qt4 released in Mandriva 2009\n Spring. This breaks the kde-python part on a 2009.0 to 2009 Spring\n system upgrade. This fixes it by releasing updated python packages\n with a higher release number on Mandriva 2009 Spring.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.mandriva.com/security-announce/2010-02/msg00058.php\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.830910\");\n script_version(\"$Revision: 8495 $\");\n script_cve_id(\"CVE-2008-3279\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-23 08:57:49 +0100 (Tue, 23 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2010-03-02 08:46:47 +0100 (Tue, 02 Mar 2010)\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"MDVA\", value: \"2010:080\");\n script_name(\"Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of python-qt4\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"MNDK_2009.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"falcon-kde4\", rpm:\"falcon-kde4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kimono\", rpm:\"kimono~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kimono-devel\", rpm:\"kimono-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libqtruby4shared2\", rpm:\"libqtruby4shared2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libqyotoshared1\", rpm:\"libqyotoshared1~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeakonadi2\", rpm:\"libsmokeakonadi2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokekde2\", rpm:\"libsmokekde2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokekhtml2\", rpm:\"libsmokekhtml2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokenepomuk2\", rpm:\"libsmokenepomuk2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeplasma2\", rpm:\"libsmokeplasma2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqsci2\", rpm:\"libsmokeqsci2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqt2\", rpm:\"libsmokeqt2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqtscript2\", rpm:\"libsmokeqtscript2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqttest2\", rpm:\"libsmokeqttest2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqtuitools2\", rpm:\"libsmokeqtuitools2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqtwebkit2\", rpm:\"libsmokeqtwebkit2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokesolid2\", rpm:\"libsmokesolid2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokesoprano2\", rpm:\"libsmokesoprano2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmoketexteditor2\", rpm:\"libsmoketexteditor2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"php-qt4\", rpm:\"php-qt4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-kde4\", rpm:\"python-kde4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-kde4-doc\", rpm:\"python-kde4-doc~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4\", rpm:\"python-qt4~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-assistant\", rpm:\"python-qt4-assistant~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-core\", rpm:\"python-qt4-core~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-designer\", rpm:\"python-qt4-designer~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-devel\", rpm:\"python-qt4-devel~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-gui\", rpm:\"python-qt4-gui~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-help\", rpm:\"python-qt4-help~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-network\", rpm:\"python-qt4-network~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-opengl\", rpm:\"python-qt4-opengl~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-script\", rpm:\"python-qt4-script~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-scripttools\", rpm:\"python-qt4-scripttools~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-sql\", rpm:\"python-qt4-sql~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-svg\", rpm:\"python-qt4-svg~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-test\", rpm:\"python-qt4-test~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-webkit\", rpm:\"python-qt4-webkit~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-xml\", rpm:\"python-qt4-xml~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-xmlpatterns\", rpm:\"python-qt4-xmlpatterns~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-sip\", rpm:\"python-sip~4.8.1~0.2mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"qyoto\", rpm:\"qyoto~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"qyoto-devel\", rpm:\"qyoto-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-kde4\", rpm:\"ruby-kde4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-kde4-devel\", rpm:\"ruby-kde4-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-qt4\", rpm:\"ruby-qt4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-qt4-devel\", rpm:\"ruby-qt4-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"smoke4-devel\", rpm:\"smoke4-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kdebindings4\", rpm:\"kdebindings4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64qtruby4shared2\", rpm:\"lib64qtruby4shared2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64qyotoshared1\", rpm:\"lib64qyotoshared1~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeakonadi2\", rpm:\"lib64smokeakonadi2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokekde2\", rpm:\"lib64smokekde2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokekhtml2\", rpm:\"lib64smokekhtml2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokenepomuk2\", rpm:\"lib64smokenepomuk2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeplasma2\", rpm:\"lib64smokeplasma2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqsci2\", rpm:\"lib64smokeqsci2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqt2\", rpm:\"lib64smokeqt2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqtscript2\", rpm:\"lib64smokeqtscript2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqttest2\", rpm:\"lib64smokeqttest2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqtuitools2\", rpm:\"lib64smokeqtuitools2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqtwebkit2\", rpm:\"lib64smokeqtwebkit2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokesolid2\", rpm:\"lib64smokesolid2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokesoprano2\", rpm:\"lib64smokesoprano2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smoketexteditor2\", rpm:\"lib64smoketexteditor2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-02T10:53:58", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "description": "Check for the Version of brltty", "modified": "2017-12-26T00:00:00", "published": "2010-04-19T00:00:00", "id": "OPENVAS:830991", "href": "http://plugins.openvas.org/nasl.php?oid=830991", "type": "openvas", "title": "Mandriva Update for brltty MDVSA-2010:080 (brltty)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for brltty MDVSA-2010:080 (brltty)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"A vulnerability has been found and corrected in brltty:\n\n Untrusted search path vulnerability in libbrlttybba.so in brltty\n 3.7.2 allows local users to gain privileges via a crafted library,\n related to an incorrect RPATH setting (CVE-2008-3279).\n \n Packages for 2008.0 are provided for Corporate Desktop 2008.0\n customers.\n \n The updated packages have been patched to correct this issue.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\ntag_affected = \"brltty on Mandriva Linux 2008.0,\n Mandriva Linux 2008.0/X86_64\";\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.mandriva.com/security-announce/2010-04/msg00026.php\");\n script_id(830991);\n script_version(\"$Revision: 8245 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-12-26 07:29:59 +0100 (Tue, 26 Dec 2017) $\");\n script_tag(name:\"creation_date\", value:\"2010-04-19 16:47:49 +0200 (Mon, 19 Apr 2010)\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"MDVSA\", value: \"2010:080\");\n script_cve_id(\"CVE-2008-3279\");\n script_name(\"Mandriva Update for brltty MDVSA-2010:080 (brltty)\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of brltty\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"MNDK_2008.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"brltty\", rpm:\"brltty~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libbrlapi0.4.1_0\", rpm:\"libbrlapi0.4.1_0~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libbrlapi0.4.1_0-devel\", rpm:\"libbrlapi0.4.1_0-devel~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64brlapi0.4.1_0\", rpm:\"lib64brlapi0.4.1_0~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64brlapi0.4.1_0-devel\", rpm:\"lib64brlapi0.4.1_0-devel~3.7.2~6.1mdv2008.0\", rls:\"MNDK_2008.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-02T10:53:56", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "description": "Check for the Version of python-qt4", "modified": "2017-12-22T00:00:00", "published": "2010-03-02T00:00:00", "id": "OPENVAS:830910", "href": "http://plugins.openvas.org/nasl.php?oid=830910", "type": "openvas", "title": "Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_affected = \"python-qt4 on Mandriva Linux 2009.1,\n Mandriva Linux 2009.1/X86_64\";\ntag_insight = \"python-qt4 packages released for Mandriva 2009.0 as update are\n in a higher version than python-qt4 released in Mandriva 2009\n Spring. This breaks the kde-python part on a 2009.0 to 2009 Spring\n system upgrade. This fixes it by releasing updated python packages\n with a higher release number on Mandriva 2009 Spring.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.mandriva.com/security-announce/2010-02/msg00058.php\");\n script_id(830910);\n script_version(\"$Revision: 8226 $\");\n script_cve_id(\"CVE-2008-3279\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-12-22 07:30:26 +0100 (Fri, 22 Dec 2017) $\");\n script_tag(name:\"creation_date\", value:\"2010-03-02 08:46:47 +0100 (Tue, 02 Mar 2010)\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"MDVA\", value: \"2010:080\");\n script_name(\"Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of python-qt4\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"MNDK_2009.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"falcon-kde4\", rpm:\"falcon-kde4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kimono\", rpm:\"kimono~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kimono-devel\", rpm:\"kimono-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libqtruby4shared2\", rpm:\"libqtruby4shared2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libqyotoshared1\", rpm:\"libqyotoshared1~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeakonadi2\", rpm:\"libsmokeakonadi2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokekde2\", rpm:\"libsmokekde2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokekhtml2\", rpm:\"libsmokekhtml2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokenepomuk2\", rpm:\"libsmokenepomuk2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeplasma2\", rpm:\"libsmokeplasma2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqsci2\", rpm:\"libsmokeqsci2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqt2\", rpm:\"libsmokeqt2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqtscript2\", rpm:\"libsmokeqtscript2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqttest2\", rpm:\"libsmokeqttest2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqtuitools2\", rpm:\"libsmokeqtuitools2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokeqtwebkit2\", rpm:\"libsmokeqtwebkit2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokesolid2\", rpm:\"libsmokesolid2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmokesoprano2\", rpm:\"libsmokesoprano2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libsmoketexteditor2\", rpm:\"libsmoketexteditor2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"php-qt4\", rpm:\"php-qt4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-kde4\", rpm:\"python-kde4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-kde4-doc\", rpm:\"python-kde4-doc~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4\", rpm:\"python-qt4~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-assistant\", rpm:\"python-qt4-assistant~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-core\", rpm:\"python-qt4-core~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-designer\", rpm:\"python-qt4-designer~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-devel\", rpm:\"python-qt4-devel~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-gui\", rpm:\"python-qt4-gui~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-help\", rpm:\"python-qt4-help~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-network\", rpm:\"python-qt4-network~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-opengl\", rpm:\"python-qt4-opengl~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-script\", rpm:\"python-qt4-script~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-scripttools\", rpm:\"python-qt4-scripttools~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-sql\", rpm:\"python-qt4-sql~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-svg\", rpm:\"python-qt4-svg~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-test\", rpm:\"python-qt4-test~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-webkit\", rpm:\"python-qt4-webkit~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-xml\", rpm:\"python-qt4-xml~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-qt4-xmlpatterns\", rpm:\"python-qt4-xmlpatterns~4.5.2~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-sip\", rpm:\"python-sip~4.8.1~0.2mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"qyoto\", rpm:\"qyoto~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"qyoto-devel\", rpm:\"qyoto-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-kde4\", rpm:\"ruby-kde4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-kde4-devel\", rpm:\"ruby-kde4-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-qt4\", rpm:\"ruby-qt4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ruby-qt4-devel\", rpm:\"ruby-qt4-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"smoke4-devel\", rpm:\"smoke4-devel~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kdebindings4\", rpm:\"kdebindings4~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64qtruby4shared2\", rpm:\"lib64qtruby4shared2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64qyotoshared1\", rpm:\"lib64qyotoshared1~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeakonadi2\", rpm:\"lib64smokeakonadi2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokekde2\", rpm:\"lib64smokekde2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokekhtml2\", rpm:\"lib64smokekhtml2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokenepomuk2\", rpm:\"lib64smokenepomuk2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeplasma2\", rpm:\"lib64smokeplasma2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqsci2\", rpm:\"lib64smokeqsci2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqt2\", rpm:\"lib64smokeqt2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqtscript2\", rpm:\"lib64smokeqtscript2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqttest2\", rpm:\"lib64smokeqttest2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqtuitools2\", rpm:\"lib64smokeqtuitools2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokeqtwebkit2\", rpm:\"lib64smokeqtwebkit2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokesolid2\", rpm:\"lib64smokesolid2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smokesoprano2\", rpm:\"lib64smokesoprano2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64smoketexteditor2\", rpm:\"lib64smoketexteditor2~4.2.4~0.3mdv2009.1\", rls:\"MNDK_2009.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-12-21T11:33:05", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "description": "Check for the Version of brltty", "modified": "2017-12-20T00:00:00", "published": "2010-04-06T00:00:00", "id": "OPENVAS:870246", "href": "http://plugins.openvas.org/nasl.php?oid=870246", "type": "openvas", "title": "RedHat Update for brltty RHSA-2010:0181-05", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for brltty RHSA-2010:0181-05\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"brltty (Braille TTY) is a background process (daemon) which provides access\n to the Linux console (when in text mode) for a blind person using a\n refreshable braille display. It drives the braille display, and provides\n complete screen review functionality.\n\n It was discovered that a brltty library had an insecure relative RPATH\n (runtime library search path) set in the ELF (Executable and Linking\n Format) header. A local user able to convince another user to run an\n application using brltty in an attacker-controlled directory, could run\n arbitrary code with the privileges of the victim. (CVE-2008-3279)\n \n These updated packages also provide fixes for the following bugs:\n \n * the brltty configuration file is documented in the brltty manual page,\n but there is no separate manual page for the /etc/brltty.conf configuration\n file: running "man brltty.conf" returned "No manual entry for brltty.conf"\n rather than opening the brltty manual entry. This update adds brltty.conf.5\n as an alias to the brltty manual page. Consequently, running "man\n brltty.conf" now opens the manual entry documenting the brltty.conf\n specification. (BZ#530554)\n \n * previously, the brltty-pm.conf configuration file was installed in the\n /etc/brltty/ directory. This file, which configures Papenmeier Braille\n Terminals for use with Red Hat Enterprise Linux, is optional. As well, it\n did not come with a corresponding manual page. With this update, the file\n has been moved to /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/.\n This directory also includes a README document that explains the file's\n purpose and format. (BZ#530554)\n \n * during the brltty packages installation, the message\n \n Creating screen inspection device /dev/vcsa...done.\n \n was presented at the console. This was inadequate, especially during the\n initial install of the system. These updated packages do not send any\n message to the console during installation. (BZ#529163)\n \n * although brltty contains ELF objects, the brltty-debuginfo package was\n empty. With this update, the -debuginfo package contains valid debugging\n information as expected. (BZ#500545)\n \n * the MAX_NR_CONSOLES definition was acquired by brltty by #including\n linux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved to\n linux/vt.h but the #include in api_client.c was not updated. Consequently,\n brltty could not be built from the source RPM against the Red Hat\n Enterprise Linux 5 kernel. This update corrects the #include in\n api_client.c to linux/vt.h and brltty now builds from source as expected.\n (BZ#456247)\n \n All brltty users are advised to upgrade to these updated packages, which\n resolve these issues.\";\n\ntag_affected = \"brltty on Red Hat Enterprise Linux (v. 5 server)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2010-March/msg00030.html\");\n script_id(870246);\n script_version(\"$Revision: 8186 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-12-20 07:30:34 +0100 (Wed, 20 Dec 2017) $\");\n script_tag(name:\"creation_date\", value:\"2010-04-06 08:56:44 +0200 (Tue, 06 Apr 2010)\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"RHSA\", value: \"2010:0181-05\");\n script_cve_id(\"CVE-2008-3279\");\n script_name(\"RedHat Update for brltty RHSA-2010:0181-05\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of brltty\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_5\")\n{\n\n if ((res = isrpmvuln(pkg:\"brlapi\", rpm:\"brlapi~0.4.1~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"brlapi-devel\", rpm:\"brlapi-devel~0.4.1~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"brltty\", rpm:\"brltty~3.7.2~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"brltty-debuginfo\", rpm:\"brltty-debuginfo~3.7.2~4.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "oraclelinux": [{"lastseen": "2019-05-29T18:35:22", "bulletinFamily": "unix", "cvelist": ["CVE-2008-3279"], "description": "[3.7.2-4]\n- use rpm macros more consistently\n- add manual page for brltty.conf\n- add more documentation\n- install the default brltty-pm.conf to docdir only\n- Resolves: #530554\n- silence the postinstall scriptlet\n- Resolves: #529163\n[3.7.2-3]\n- escape rpm macros in the rpm change log\n- remove bogus rpath from libbrlttybba.so (CVE-2008-3279, #457942)\n- add dependencies to bind the subpackages from one build together\n[3.7.2-2]\n- fix building with newer kernel-headers (#456247)\n- do not strip debug info during install (#500545)\n- Resolves: rhbz #456247 #500545", "edition": 4, "modified": "2010-04-05T00:00:00", "published": "2010-04-05T00:00:00", "id": "ELSA-2010-0181", "href": "http://linux.oracle.com/errata/ELSA-2010-0181.html", "title": "brltty security and bug fix update", "type": "oraclelinux", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}], "nessus": [{"lastseen": "2021-01-07T11:52:38", "description": "A vulnerability has been found and corrected in brltty :\n\nUntrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2\nallows local users to gain privileges via a crafted library, related\nto an incorrect RPATH setting (CVE-2008-3279).\n\nPackages for 2008.0 are provided for Corporate Desktop 2008.0\ncustomers.\n\nThe updated packages have been patched to correct this issue.", "edition": 24, "published": "2010-04-19T00:00:00", "title": "Mandriva Linux Security Advisory : brltty (MDVSA-2010:080)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "modified": "2010-04-19T00:00:00", "cpe": ["p-cpe:/a:mandriva:linux:lib64brlapi0.4.1_0-devel", "p-cpe:/a:mandriva:linux:libbrlapi0.4.1_0-devel", "p-cpe:/a:mandriva:linux:brltty", "p-cpe:/a:mandriva:linux:lib64brlapi0.4.1_0", "cpe:/o:mandriva:linux:2008.0", "p-cpe:/a:mandriva:linux:libbrlapi0.4.1_0"], "id": "MANDRIVA_MDVSA-2010-080.NASL", "href": "https://www.tenable.com/plugins/nessus/45565", "sourceData": "#%NASL_MIN_LEVEL 70300\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandriva Linux Security Advisory MDVSA-2010:080. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(45565);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2008-3279\");\n script_bugtraq_id(39097);\n script_xref(name:\"MDVSA\", value:\"2010:080\");\n\n script_name(english:\"Mandriva Linux Security Advisory : brltty (MDVSA-2010:080)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandriva Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A vulnerability has been found and corrected in brltty :\n\nUntrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2\nallows local users to gain privileges via a crafted library, related\nto an incorrect RPATH setting (CVE-2008-3279).\n\nPackages for 2008.0 are provided for Corporate Desktop 2008.0\ncustomers.\n\nThe updated packages have been patched to correct this issue.\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:ND\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:brltty\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64brlapi0.4.1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64brlapi0.4.1_0-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libbrlapi0.4.1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libbrlapi0.4.1_0-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2008.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/04/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2010/04/19\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2010-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK2008.0\", reference:\"brltty-3.7.2-6.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64brlapi0.4.1_0-3.7.2-6.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64brlapi0.4.1_0-devel-3.7.2-6.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libbrlapi0.4.1_0-3.7.2-6.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libbrlapi0.4.1_0-devel-3.7.2-6.1mdv2008.0\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-17T13:44:43", "description": "It was discovered that a brltty library had an insecure relative RPATH\n(runtime library search path) set in the ELF (Executable and Linking\nFormat) header. A local user able to convince another user to run an\napplication using brltty in an attacker-controlled directory, could\nrun arbitrary code with the privileges of the victim. (CVE-2008-3279)\n\nThese updated packages also provide fixes for the following bugs :\n\n - the brltty configuration file is documented in the\n brltty manual page, but there is no separate manual page\n for the /etc/brltty.conf configuration file: running\n 'man brltty.conf' returned 'No manual entry for\n brltty.conf' rather than opening the brltty manual\n entry. This update adds brltty.conf.5 as an alias to the\n brltty manual page. Consequently, running 'man\n brltty.conf' now opens the manual entry documenting the\n brltty.conf specification. (BZ#530554)\n\n - previously, the brltty-pm.conf configuration file was\n installed in the /etc/brltty/ directory. This file,\n which configures Papenmeier Braille Terminals for use\n with Scientific Linux, is optional. As well, it did not\n come with a corresponding manual page. With this update,\n the file has been moved to\n /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/.\n This directory also includes a README document that\n explains the file's purpose and format. (BZ#530554)\n\n - during the brltty packages installation, the message\n\n Creating screen inspection device /dev/vcsa...done.\n\nwas presented at the console. This was inadequate, especially during\nthe initial install of the system. These updated packages do not send\nany message to the console during installation. (BZ#529163)\n\n - although brltty contains ELF objects, the\n brltty-debuginfo package was empty. With this update,\n the -debuginfo package contains valid debugging\n information as expected. (BZ#500545)\n\n - the MAX_NR_CONSOLES definition was acquired by brltty by\n #including linux/tty.h in Programs/api_client.c.\n MAX_NR_CONSOLES has since moved to linux/vt.h but the\n #include in api_client.c was not updated. Consequently,\n brltty could not be built from the source RPM against\n the Scientific Linux 5 kernel. This update corrects the\n #include in api_client.c to linux/vt.h and brltty now\n builds from source as expected. (BZ#456247)", "edition": 25, "published": "2012-08-01T00:00:00", "title": "Scientific Linux Security Update : brltty on SL5.x i386/x86_64", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "modified": "2012-08-01T00:00:00", "cpe": ["x-cpe:/o:fermilab:scientific_linux"], "id": "SL_20100330_BRLTTY_ON_SL5_X.NASL", "href": "https://www.tenable.com/plugins/nessus/60762", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(60762);\n script_version(\"1.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2008-3279\");\n\n script_name(english:\"Scientific Linux Security Update : brltty on SL5.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that a brltty library had an insecure relative RPATH\n(runtime library search path) set in the ELF (Executable and Linking\nFormat) header. A local user able to convince another user to run an\napplication using brltty in an attacker-controlled directory, could\nrun arbitrary code with the privileges of the victim. (CVE-2008-3279)\n\nThese updated packages also provide fixes for the following bugs :\n\n - the brltty configuration file is documented in the\n brltty manual page, but there is no separate manual page\n for the /etc/brltty.conf configuration file: running\n 'man brltty.conf' returned 'No manual entry for\n brltty.conf' rather than opening the brltty manual\n entry. This update adds brltty.conf.5 as an alias to the\n brltty manual page. Consequently, running 'man\n brltty.conf' now opens the manual entry documenting the\n brltty.conf specification. (BZ#530554)\n\n - previously, the brltty-pm.conf configuration file was\n installed in the /etc/brltty/ directory. This file,\n which configures Papenmeier Braille Terminals for use\n with Scientific Linux, is optional. As well, it did not\n come with a corresponding manual page. With this update,\n the file has been moved to\n /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/.\n This directory also includes a README document that\n explains the file's purpose and format. (BZ#530554)\n\n - during the brltty packages installation, the message\n\n Creating screen inspection device /dev/vcsa...done.\n\nwas presented at the console. This was inadequate, especially during\nthe initial install of the system. These updated packages do not send\nany message to the console during installation. (BZ#529163)\n\n - although brltty contains ELF objects, the\n brltty-debuginfo package was empty. With this update,\n the -debuginfo package contains valid debugging\n information as expected. (BZ#500545)\n\n - the MAX_NR_CONSOLES definition was acquired by brltty by\n #including linux/tty.h in Programs/api_client.c.\n MAX_NR_CONSOLES has since moved to linux/vt.h but the\n #include in api_client.c was not updated. Consequently,\n brltty could not be built from the source RPM against\n the Scientific Linux 5 kernel. This update corrects the\n #include in api_client.c to linux/vt.h and brltty now\n builds from source as expected. (BZ#456247)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=456247\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=500545\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=529163\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530554\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1004&L=scientific-linux-errata&T=0&P=2402\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9141ddcc\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected brlapi, brlapi-devel and / or brltty packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/03/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL5\", reference:\"brlapi-0.4.1-4.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"brlapi-devel-0.4.1-4.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"brltty-3.7.2-4.el5\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-17T13:07:35", "description": "Updated brltty packages that fix one security issue and several bugs\nare now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nbrltty (Braille TTY) is a background process (daemon) which provides\naccess to the Linux console (when in text mode) for a blind person\nusing a refreshable braille display. It drives the braille display,\nand provides complete screen review functionality.\n\nIt was discovered that a brltty library had an insecure relative RPATH\n(runtime library search path) set in the ELF (Executable and Linking\nFormat) header. A local user able to convince another user to run an\napplication using brltty in an attacker-controlled directory, could\nrun arbitrary code with the privileges of the victim. (CVE-2008-3279)\n\nThese updated packages also provide fixes for the following bugs :\n\n* the brltty configuration file is documented in the brltty manual\npage, but there is no separate manual page for the /etc/brltty.conf\nconfiguration file: running 'man brltty.conf' returned 'No manual\nentry for brltty.conf' rather than opening the brltty manual entry.\nThis update adds brltty.conf.5 as an alias to the brltty manual page.\nConsequently, running 'man brltty.conf' now opens the manual entry\ndocumenting the brltty.conf specification. (BZ#530554)\n\n* previously, the brltty-pm.conf configuration file was installed in\nthe /etc/brltty/ directory. This file, which configures Papenmeier\nBraille Terminals for use with Red Hat Enterprise Linux, is optional.\nAs well, it did not come with a corresponding manual page. With this\nupdate, the file has been moved to\n/usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/. This directory\nalso includes a README document that explains the file's purpose and\nformat. (BZ#530554)\n\n* during the brltty packages installation, the message\n\nCreating screen inspection device /dev/vcsa...done.\n\nwas presented at the console. This was inadequate, especially during\nthe initial install of the system. These updated packages do not send\nany message to the console during installation. (BZ#529163)\n\n* although brltty contains ELF objects, the brltty-debuginfo package\nwas empty. With this update, the -debuginfo package contains valid\ndebugging information as expected. (BZ#500545)\n\n* the MAX_NR_CONSOLES definition was acquired by brltty by #including\nlinux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved\nto linux/vt.h but the #include in api_client.c was not updated.\nConsequently, brltty could not be built from the source RPM against\nthe Red Hat Enterprise Linux 5 kernel. This update corrects the\n#include in api_client.c to linux/vt.h and brltty now builds from\nsource as expected. (BZ#456247)\n\nAll brltty users are advised to upgrade to these updated packages,\nwhich resolve these issues.", "edition": 28, "published": "2010-05-11T00:00:00", "title": "RHEL 5 : brltty (RHSA-2010:0181)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-3279"], "modified": "2010-05-11T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:brlapi", "cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:brlapi-devel", "p-cpe:/a:redhat:enterprise_linux:brltty"], "id": "REDHAT-RHSA-2010-0181.NASL", "href": "https://www.tenable.com/plugins/nessus/46283", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2010:0181. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(46283);\n script_version(\"1.18\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2008-3279\");\n script_xref(name:\"RHSA\", value:\"2010:0181\");\n\n script_name(english:\"RHEL 5 : brltty (RHSA-2010:0181)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated brltty packages that fix one security issue and several bugs\nare now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nbrltty (Braille TTY) is a background process (daemon) which provides\naccess to the Linux console (when in text mode) for a blind person\nusing a refreshable braille display. It drives the braille display,\nand provides complete screen review functionality.\n\nIt was discovered that a brltty library had an insecure relative RPATH\n(runtime library search path) set in the ELF (Executable and Linking\nFormat) header. A local user able to convince another user to run an\napplication using brltty in an attacker-controlled directory, could\nrun arbitrary code with the privileges of the victim. (CVE-2008-3279)\n\nThese updated packages also provide fixes for the following bugs :\n\n* the brltty configuration file is documented in the brltty manual\npage, but there is no separate manual page for the /etc/brltty.conf\nconfiguration file: running 'man brltty.conf' returned 'No manual\nentry for brltty.conf' rather than opening the brltty manual entry.\nThis update adds brltty.conf.5 as an alias to the brltty manual page.\nConsequently, running 'man brltty.conf' now opens the manual entry\ndocumenting the brltty.conf specification. (BZ#530554)\n\n* previously, the brltty-pm.conf configuration file was installed in\nthe /etc/brltty/ directory. This file, which configures Papenmeier\nBraille Terminals for use with Red Hat Enterprise Linux, is optional.\nAs well, it did not come with a corresponding manual page. With this\nupdate, the file has been moved to\n/usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/. This directory\nalso includes a README document that explains the file's purpose and\nformat. (BZ#530554)\n\n* during the brltty packages installation, the message\n\nCreating screen inspection device /dev/vcsa...done.\n\nwas presented at the console. This was inadequate, especially during\nthe initial install of the system. These updated packages do not send\nany message to the console during installation. (BZ#529163)\n\n* although brltty contains ELF objects, the brltty-debuginfo package\nwas empty. With this update, the -debuginfo package contains valid\ndebugging information as expected. (BZ#500545)\n\n* the MAX_NR_CONSOLES definition was acquired by brltty by #including\nlinux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved\nto linux/vt.h but the #include in api_client.c was not updated.\nConsequently, brltty could not be built from the source RPM against\nthe Red Hat Enterprise Linux 5 kernel. This update corrects the\n#include in api_client.c to linux/vt.h and brltty now builds from\nsource as expected. (BZ#456247)\n\nAll brltty users are advised to upgrade to these updated packages,\nwhich resolve these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2008-3279\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2010:0181\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected brlapi, brlapi-devel and / or brltty packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:brlapi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:brlapi-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:brltty\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2010/04/05\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/03/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2010/05/11\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2010-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2010:0181\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", reference:\"brlapi-0.4.1-4.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"brlapi-devel-0.4.1-4.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"brltty-3.7.2-4.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"brltty-3.7.2-4.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"brltty-3.7.2-4.el5\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"brlapi / brlapi-devel / brltty\");\n }\n}\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}], "redhat": [{"lastseen": "2019-08-13T18:46:20", "bulletinFamily": "unix", "cvelist": ["CVE-2008-3279"], "description": "brltty (Braille TTY) is a background process (daemon) which provides access\nto the Linux console (when in text mode) for a blind person using a\nrefreshable braille display. It drives the braille display, and provides\ncomplete screen review functionality.\n\nIt was discovered that a brltty library had an insecure relative RPATH\n(runtime library search path) set in the ELF (Executable and Linking\nFormat) header. A local user able to convince another user to run an\napplication using brltty in an attacker-controlled directory, could run\narbitrary code with the privileges of the victim. (CVE-2008-3279)\n\nThese updated packages also provide fixes for the following bugs:\n\n* the brltty configuration file is documented in the brltty manual page,\nbut there is no separate manual page for the /etc/brltty.conf configuration\nfile: running \"man brltty.conf\" returned \"No manual entry for brltty.conf\"\nrather than opening the brltty manual entry. This update adds brltty.conf.5\nas an alias to the brltty manual page. Consequently, running \"man\nbrltty.conf\" now opens the manual entry documenting the brltty.conf\nspecification. (BZ#530554)\n\n* previously, the brltty-pm.conf configuration file was installed in the\n/etc/brltty/ directory. This file, which configures Papenmeier Braille\nTerminals for use with Red Hat Enterprise Linux, is optional. As well, it\ndid not come with a corresponding manual page. With this update, the file\nhas been moved to /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/.\nThis directory also includes a README document that explains the file's\npurpose and format. (BZ#530554)\n\n* during the brltty packages installation, the message\n\nCreating screen inspection device /dev/vcsa...done.\n\nwas presented at the console. This was inadequate, especially during the\ninitial install of the system. These updated packages do not send any\nmessage to the console during installation. (BZ#529163)\n\n* although brltty contains ELF objects, the brltty-debuginfo package was\nempty. With this update, the -debuginfo package contains valid debugging\ninformation as expected. (BZ#500545)\n\n* the MAX_NR_CONSOLES definition was acquired by brltty by #including\nlinux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved to\nlinux/vt.h but the #include in api_client.c was not updated. Consequently,\nbrltty could not be built from the source RPM against the Red Hat\nEnterprise Linux 5 kernel. This update corrects the #include in\napi_client.c to linux/vt.h and brltty now builds from source as expected.\n(BZ#456247)\n\nAll brltty users are advised to upgrade to these updated packages, which\nresolve these issues.", "modified": "2017-09-08T11:49:51", "published": "2010-03-30T04:00:00", "id": "RHSA-2010:0181", "href": "https://access.redhat.com/errata/RHSA-2010:0181", "type": "redhat", "title": "(RHSA-2010:0181) Low: brltty security and bug fix update", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}]}