Lucene search

K
openvasCopyright (c) 2012 Greenbone Networks GmbHOPENVAS:864024
HistoryApr 02, 2012 - 12:00 a.m.

Fedora Update for openswan FEDORA-2011-15196

2012-04-0200:00:00
Copyright (c) 2012 Greenbone Networks GmbH
plugins.openvas.org
14

EPSS

0.01

Percentile

83.9%

Check for the Version of openswan

###############################################################################
# OpenVAS Vulnerability Test
#
# Fedora Update for openswan FEDORA-2011-15196
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################

include("revisions-lib.inc");
tag_insight = "Openswan is a free implementation of IPsec & IKE for Linux.  IPsec is
  the Internet Protocol Security and uses strong cryptography to provide
  both authentication and encryption services.  These services allow you
  to build secure tunnels through untrusted networks.  Everything passing
  through the untrusted net is encrypted by the ipsec gateway machine and
  decrypted by the gateway at the other end of the tunnel.  The resulting
  tunnel is a virtual private network or VPN.

  This package contains the daemons and userland tools for setting up
  Openswan. It supports the NETKEY/XFRM IPsec kernel stack that exists
  in the default Linux kernel.

  Openswan 2.6.x also supports IKEv2 (RFC4306)";

tag_affected = "openswan on Fedora 16";
tag_solution = "Please Install the Updated Packages.";



if(description)
{
  script_xref(name : "URL" , value : "http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070695.html");
  script_id(864024);
  script_version("$Revision: 8267 $");
  script_tag(name:"last_modification", value:"$Date: 2018-01-02 07:29:17 +0100 (Tue, 02 Jan 2018) $");
  script_tag(name:"creation_date", value:"2012-04-02 13:01:50 +0530 (Mon, 02 Apr 2012)");
  script_cve_id("CVE-2011-4073");
  script_tag(name:"cvss_base", value:"4.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:N/I:N/A:P");
  script_xref(name: "FEDORA", value: "2011-15196");
  script_name("Fedora Update for openswan FEDORA-2011-15196");

  script_tag(name: "summary" , value: "Check for the Version of openswan");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (c) 2012 Greenbone Networks GmbH");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms");
  script_tag(name : "affected" , value : tag_affected);
  script_tag(name : "solution" , value : tag_solution);
  script_tag(name : "insight" , value : tag_insight);
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  exit(0);
}


include("pkg-lib-rpm.inc");

release = get_kb_item("ssh/login/release");

res = "";
if(release == NULL){
  exit(0);
}

if(release == "FC16")
{

  if ((res = isrpmvuln(pkg:"openswan", rpm:"openswan~2.6.37~1.fc16", rls:"FC16")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99); # Not vulnerable.
  exit(0);
}