Lucene search

K

SUSE: Security Advisory for ntp (SUSE-SU-2015:0259-1)

🗓️ 13 Oct 2015 00:00:00Reported by Copyright (C) 2015 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 35 Views

The remote host is missing an update for the 'ntp' package(s) announced via the referenced advisory. ntp has been updated to fix four security issues related to weak RNG seed, improper key generation, ACL bypass, and potential information leak

Show more
Related
Code
# Copyright (C) 2015 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.850782");
  script_version("2021-10-18T09:03:47+0000");
  script_tag(name:"last_modification", value:"2021-10-18 09:03:47 +0000 (Mon, 18 Oct 2021)");
  script_tag(name:"creation_date", value:"2015-10-13 15:33:05 +0530 (Tue, 13 Oct 2015)");
  script_cve_id("CVE-2014-9293", "CVE-2014-9294", "CVE-2014-9297", "CVE-2014-9298");
  script_tag(name:"cvss_base", value:"7.5");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_tag(name:"qod_type", value:"package");
  script_name("SUSE: Security Advisory for ntp (SUSE-SU-2015:0259-1)");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'ntp'
  package(s) announced via the referenced advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"ntp has been updated to fix four security issues:

  * CVE-2014-9294: ntp-keygen used a weak RNG seed, which made it easier
  for remote attackers to defeat cryptographic protection mechanisms
  via a brute-force attack. (bsc#910764)

  * CVE-2014-9293: The config_auth function, when an auth key is not
  configured, improperly generated a key, which made it easier for
  remote attackers to defeat cryptographic protection mechanisms via a
  brute-force attack. (bsc#910764)

  * CVE-2014-9298: ::1 can be spoofed on some operating systems, so ACLs
  based on IPv6 ::1 addresses could be bypassed. (bsc#910764)

  * CVE-2014-9297: vallen is not validated in several places in
  ntp_crypto.c, leading to potential information leak. (bsc#910764)

  Security Issues:

  * CVE-2014-9294

  * CVE-2014-9293

  * CVE-2014-9298

  * CVE-2014-9297");

  script_tag(name:"affected", value:"ntp on SUSE Linux Enterprise Server 11 SP3");

  script_tag(name:"solution", value:"Please install the updated package(s).");
  script_xref(name:"SUSE-SU", value:"2015:0259-1");
  script_tag(name:"solution_type", value:"VendorFix");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2015 Greenbone Networks GmbH");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=SLES11\.0SP3");
  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "SLES11.0SP3") {
  if(!isnull(res = isrpmvuln(pkg:"ntp", rpm:"ntp~4.2.4p8~1.29.32.1", rls:"SLES11.0SP3"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"ntp-doc", rpm:"ntp-doc~4.2.4p8~1.29.32.1", rls:"SLES11.0SP3"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
13 Oct 2015 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS27.5
EPSS0.04
35
.json
Report