RedHat Update for raptor RHSA-2012:0410-01

# SPDX-FileCopyrightText: 2012 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_xref(name:"URL", value:"https://www.redhat.com/archives/rhsa-announce/2012-March/msg00016.html");
  script_oid("1.3.6.1.4.1.25623.1.0.870721");
  script_version("2024-03-21T05:06:54+0000");
  script_tag(name:"last_modification", value:"2024-03-21 05:06:54 +0000 (Thu, 21 Mar 2024)");
  script_tag(name:"creation_date", value:"2012-07-09 10:53:26 +0530 (Mon, 09 Jul 2012)");
  script_tag(name:"cvss_base", value:"4.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:N/A:N");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2024-02-15 03:22:33 +0000 (Thu, 15 Feb 2024)");
  script_cve_id("CVE-2012-0037");
  script_xref(name:"RHSA", value:"2012:0410-01");
  script_name("RedHat Update for raptor RHSA-2012:0410-01");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'raptor'
  package(s) announced via the referenced advisory.");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2012 Greenbone AG");
  script_family("Red Hat Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/rhel", "ssh/login/rpms", re:"ssh/login/release=RHENT_6");
  script_tag(name:"affected", value:"raptor on Red Hat Enterprise Linux Desktop (v. 6),
  Red Hat Enterprise Linux Server (v. 6),
  Red Hat Enterprise Linux Workstation (v. 6)");
  script_tag(name:"solution", value:"Please Install the Updated Packages.");
  script_tag(name:"insight", value:"Raptor provides parsers for Resource Description Framework (RDF) files.

  An XML External Entity expansion flaw was found in the way Raptor processed
  RDF files. If an application linked against Raptor were to open a
  specially-crafted RDF file, it could possibly allow a remote attacker to
  obtain a copy of an arbitrary local file that the user running the
  application had access to. A bug in the way Raptor handled external
  entities could cause that application to crash or, possibly, execute
  arbitrary code with the privileges of the user running the application.
  (CVE-2012-0037)

  Red Hat would like to thank Timothy D. Morgan of VSR for reporting this
  issue.

  All Raptor users are advised to upgrade to these updated packages, which
  contain a backported patch to correct this issue. All running applications
  linked against Raptor must be restarted for this update to take effect.");
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release) exit(0);

res = "";

if(release == "RHENT_6")
{

  if ((res = isrpmvuln(pkg:"raptor", rpm:"raptor~1.4.18~5.el6_2.1", rls:"RHENT_6")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"raptor-debuginfo", rpm:"raptor-debuginfo~1.4.18~5.el6_2.1", rls:"RHENT_6")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}