ID OPENVAS:835013 Type openvas Reporter Copyright (C) 2009 Greenbone Networks GmbH Modified 2017-07-06T00:00:00
Description
Check for the Version of LDAP-UX Integration
###############################################################################
# OpenVAS Vulnerability Test
#
# HP-UX Update for LDAP-UX Integration HPSBUX00221
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
include("revisions-lib.inc");
tag_impact = "Remote increased privilege";
tag_affected = "LDAP-UX Integration on
HP-UX B.11.00 and B.11.11.";
tag_insight = "A potential security vulnerability has beenidentified with HP-UX running the
LPAD-UX Integration product, where the vulnerability could beexploited
remotely to gain increased privilege.";
tag_solution = "Please Install the Updated Packages.";
if(description)
{
script_xref(name : "URL" , value : "http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01035736-1");
script_id(835013);
script_version("$Revision: 6584 $");
script_tag(name:"last_modification", value:"$Date: 2017-07-06 16:13:23 +0200 (Thu, 06 Jul 2017) $");
script_tag(name:"creation_date", value:"2009-05-05 12:14:23 +0200 (Tue, 05 May 2009)");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_xref(name: "HPSBUX", value: "00221");
script_name( "HP-UX Update for LDAP-UX Integration HPSBUX00221");
script_summary("Check for the Version of LDAP-UX Integration");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2009 Greenbone Networks GmbH");
script_family("HP-UX Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/hp_hp-ux", "ssh/login/release");
script_tag(name : "impact" , value : tag_impact);
script_tag(name : "affected" , value : tag_affected);
script_tag(name : "insight" , value : tag_insight);
script_tag(name : "solution" , value : tag_solution);
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
include("pkg-lib-hpux.inc");
release = get_kb_item("ssh/login/release");
res = "";
if(release == NULL){
exit(0);
}
if(release == "HPUX11.00")
{
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.ADMIN-RUN", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.CORE-RUN", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.LDAP-C-SDK", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.LDUX-ENG-A-MAN", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.NATIVELDAP-RUN", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.PAM-AUTHZ-RUN", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"NisLdapServer.YPLDAP-SERVER", revision:"B.03.01", rls:"HPUX11.00")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99); # Not vulnerable.
exit(0);
}
if(release == "HPUX11.11")
{
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.ADMIN-RUN", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.CORE-RUN", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.LDAP-C-SDK", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.LDUX-ENG-A-MAN", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.NATIVELDAP-RUN", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"LdapUxClient.PAM-AUTHZ-RUN", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = ishpuxpkgvuln(pkg:"NisLdapServer.YPLDAP-SERVER", revision:"B.03.01", rls:"HPUX11.11")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99); # Not vulnerable.
exit(0);
}
{"id": "OPENVAS:835013", "type": "openvas", "bulletinFamily": "scanner", "title": "HP-UX Update for LDAP-UX Integration HPSBUX00221", "description": "Check for the Version of LDAP-UX Integration", "published": "2009-05-05T00:00:00", "modified": "2017-07-06T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "http://plugins.openvas.org/nasl.php?oid=835013", "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "references": ["http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01035736-1", "00221"], "cvelist": [], "lastseen": "2017-07-24T12:56:47", "viewCount": 0, "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2017-07-24T12:56:47", "rev": 2}, "dependencies": {"references": [], "modified": "2017-07-24T12:56:47", "rev": 2}, "vulnersScore": -0.2}, "pluginID": "835013", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# HP-UX Update for LDAP-UX Integration HPSBUX00221\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_impact = \"Remote increased privilege\";\ntag_affected = \"LDAP-UX Integration on\n HP-UX B.11.00 and B.11.11.\";\ntag_insight = \"A potential security vulnerability has beenidentified with HP-UX running the \n LPAD-UX Integration product, where the vulnerability could beexploited \n remotely to gain increased privilege.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01035736-1\");\n script_id(835013);\n script_version(\"$Revision: 6584 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-06 16:13:23 +0200 (Thu, 06 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-05-05 12:14:23 +0200 (Tue, 05 May 2009)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"HPSBUX\", value: \"00221\");\n script_name( \"HP-UX Update for LDAP-UX Integration HPSBUX00221\");\n\n script_summary(\"Check for the Version of LDAP-UX Integration\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"HP-UX Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/hp_hp-ux\", \"ssh/login/release\");\n script_tag(name : \"impact\" , value : tag_impact);\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-hpux.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"HPUX11.00\")\n{\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.ADMIN-RUN\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.CORE-RUN\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.LDAP-C-SDK\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.LDUX-ENG-A-MAN\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.NATIVELDAP-RUN\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.PAM-AUTHZ-RUN\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"NisLdapServer.YPLDAP-SERVER\", revision:\"B.03.01\", rls:\"HPUX11.00\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n\n\nif(release == \"HPUX11.11\")\n{\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.ADMIN-RUN\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.CORE-RUN\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.LDAP-C-SDK\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.LDUX-ENG-A-MAN\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.NATIVELDAP-RUN\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"LdapUxClient.PAM-AUTHZ-RUN\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = ishpuxpkgvuln(pkg:\"NisLdapServer.YPLDAP-SERVER\", revision:\"B.03.01\", rls:\"HPUX11.11\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "naslFamily": "HP-UX Local Security Checks"}