Search...

Linux Kernel Netfliter IP Packet Fragment DoS

2005-03-15T14:12:28

ID OSVDB:14965
Type osvdb
Reporter OSVDB
Modified 2005-03-15T14:12:28

Description

No description provided by the source

References:

Secunia Advisory ID:15019 Secunia Advisory ID:15887 Secunia Advisory ID:14594 Secunia Advisory ID:15886 Secunia Advisory ID:14710 Secunia Advisory ID:14295 Other Advisory URL: http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:111 Other Advisory URL: http://rhn.redhat.com/errata/RHSA-2005-366.html Other Advisory URL: http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:110 Mail List Post: http://marc.theaimsgroup.com/?l=bugtraq&m=111091402626556&w=2 CVE-2005-0209

JSON Vulners Source

Initial Source

{"type": "osvdb", "published": "2005-03-15T14:12:28", "href": "https://vulners.com/osvdb/OSVDB:14965", "bulletinFamily": "software", "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/", "score": 7.8}, "viewCount": 0, "edition": 1, "reporter": "OSVDB", "title": "Linux Kernel Netfliter IP Packet Fragment DoS", "affectedSoftware": [], "enchantments": {"score": {"value": 6.6, "vector": "NONE", "modified": "2017-04-28T13:20:11", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2005-0209"]}, {"type": "nessus", "idList": ["REDHAT-RHSA-2005-366.NASL", "REDHAT-RHSA-2005-420.NASL", "CENTOS_RHSA-2005-420.NASL", "UBUNTU_USN-95-1.NASL", "CENTOS_RHSA-2005-366.NASL", "MANDRAKE_MDKSA-2005-111.NASL", "SUSE_SA_2005_018.NASL", "MANDRAKE_MDKSA-2005-110.NASL"]}, {"type": "redhat", "idList": ["RHSA-2005:420"]}, {"type": "centos", "idList": ["CESA-2005:420"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:8194"]}, {"type": "ubuntu", "idList": ["USN-95-1"]}, {"type": "openvas", "idList": ["OPENVAS:136141256231065101", "OPENVAS:65101"]}, {"type": "suse", "idList": ["SUSE-SA:2005:018"]}], "modified": "2017-04-28T13:20:11", "rev": 2}, "vulnersScore": 6.6}, "references": [], "id": "OSVDB:14965", "lastseen": "2017-04-28T13:20:11", "cvelist": ["CVE-2005-0209"], "modified": "2005-03-15T14:12:28", "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:15019](https://secuniaresearch.flexerasoftware.com/advisories/15019/)\n[Secunia Advisory ID:15887](https://secuniaresearch.flexerasoftware.com/advisories/15887/)\n[Secunia Advisory ID:14594](https://secuniaresearch.flexerasoftware.com/advisories/14594/)\n[Secunia Advisory ID:15886](https://secuniaresearch.flexerasoftware.com/advisories/15886/)\n[Secunia Advisory ID:14710](https://secuniaresearch.flexerasoftware.com/advisories/14710/)\n[Secunia Advisory ID:14295](https://secuniaresearch.flexerasoftware.com/advisories/14295/)\nOther Advisory URL: http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:111\nOther Advisory URL: http://rhn.redhat.com/errata/RHSA-2005-366.html\nOther Advisory URL: http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:110\nMail List Post: http://marc.theaimsgroup.com/?l=bugtraq&m=111091402626556&w=2\n[CVE-2005-0209](https://vulners.com/cve/CVE-2005-0209)\n"}

{"cve": [{"lastseen": "2021-02-02T05:24:35", "description": "Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.", "edition": 4, "cvss3": {}, "published": "2005-05-02T04:00:00", "title": "CVE-2005-0209", "type": "cve", "cwe": ["CWE-20"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "COMPLETE", "integrityImpact": "NONE", "baseScore": 7.8, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2005-0209"], "modified": "2017-10-11T01:29:00", "cpe": ["cpe:/o:linux:linux_kernel:2.6.8.1"], "id": "CVE-2005-0209", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-0209", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}, "cpe23": ["cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*"]}], "securityvulns": [{"lastseen": "2018-08-31T11:10:12", "bulletinFamily": "software", "cvelist": ["CVE-2005-0767", "CVE-2005-0209", "CVE-2005-0210", "CVE-2005-0449"], "description": "-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n- --------------------------------------------------------------------------\r\nCONECTIVA LINUX SECURITY ANNOUNCEMENT \r\n- --------------------------------------------------------------------------\r\n\r\nPACKAGE : kernel\r\nSUMMARY : Kernel fixes\r\nDATE : 2005-03-31 12:24:00\r\nID : CLA-2005:945\r\nRELEVANT\r\nRELEASES : 10\r\n\r\n- -------------------------------------------------------------------------\r\n\r\nDESCRIPTION\r\n The Linux kernel is responsible for handling the basic functions of\r\n the GNU/Linux operating system.\r\n \r\n The following vulnerabilities are being fixed in this update:\r\n \r\n 1. CAN-2005-0767[1][2]\r\n Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1\r\n allows local users with DRI privileges to execute arbitrary code as\r\n root.\r\n \r\n 2. CAN-2005-0209[3][4]\r\n Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a\r\n denial of service (kernel crash) via crafted IP packet fragments.\r\n \r\n 3. CAN-2005-0449[5][6]\r\n The netfilter/iptables module in Linux before 2.6.8.1 allows remote\r\n attackers to cause a denial of service (kernel crash) or bypass\r\n firewall rules via crafted packets, which are not properly handled by\r\n the skb_checksum_help function.\r\n \r\n 4. CAN-2005-0210[7][8][9]\r\n Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a\r\n denial of service (memory consumption) via certain packet fragments\r\n that are reassembled twice, which causes a data structure to be\r\n allocated twice.\r\n \r\n These other changes have also been made:\r\n - the base kernel has been upgraded to version 2.6.11.\r\n - the NVidia driver has been upgraded to version 7167\r\n - DRBD has been upgraded to version 0.7.10\r\n - the hsfmodem driver has been upgraded to version 7.18.00.03full\r\n - the slmodem driver has been upgraded to version 2.9.10\r\n - the ndiswrapper driver has been upgraded to version 1.1\r\n - lm_sensors has been upgraded to version 2.9.0[11]\r\n\r\n\r\nSOLUTION\r\n It is recommended that all Conectiva Linux users perform the\r\n upgrade.\r\n \r\n IMPORTANT: exercise caution and preparation when upgrading the\r\n kernel, since it will require a reboot after the new packages are\r\n installed. More detailed instructions are available in Portuguese at\r\n our Q&A page[10].\r\n \r\n \r\n REFERENCES\r\n 1.http://linux.bkbits.net:8080/linux-2.6/cset@42088d17CO1mOAfgW4R46WRTm9gkwA\r\n 2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0767\r\n 3.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0209\r\n 4.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f59581p1swNaow4K1aBglV-q2jfQ\r\n 5.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0449\r\n 6.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f8843a8ZMCNuP3meYAYnnXd3CO_g\r\n 7.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0210\r\n 8.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fd96c39V0t4MxKFxE1aZn2f4b5UA\r\n 9.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fdb84aBJklcjU85o1N1_dsch6HBw\r\n 10.http://www.conectiva.com.br/suporte/pr/sistema.kernel.atualizar.html\r\n 11.http://bugzilla.conectiva.com.br/show_bug.cgi?id=13716\r\n\r\n\r\nUPDATED PACKAGES\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-2.6.11-72032U10_16cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/drbd-utils-0.7.10-71689U10_2cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/xfree86-driver-nvidia-1.0.7167-71010U10_2cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/kernel26-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/SRPMS/lm_sensors-2.9.0-61067U10_1cl.src.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-2.6.11-72032U10_16cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-2.6.11-72032U10_16cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-2.6.11-72032U10_16cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-2.6.11-72032U10_16cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-2.6.11-72032U10_16cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-2.6.11-72032U10_16cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-doc-2.6.11-72032U10_16cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-2.6.11-72032U10_16cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-2.6.11-72032U10_16cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-2.6.11-72032U10_16cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-2.6.11-72032U10_16cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-2.6.11-72032U10_16cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-2.6.11-72032U10_16cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-2.6.11-72032U10_16cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-2.6.11-72032U10_16cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-2.6.11-72032U10_16cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-2.6.11-72032U10_16cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-2.6.11-72032U10_16cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-2.6.11-72032U10_16cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-2.6.11-72032U10_16cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-2.6.11-72032U10_16cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-source-2.6.11-72032U10_16cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-madwifi-2.6.11.72032U10_16cl.20041216-63166U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-ndiswrapper-2.6.11.72032U10_16cl.1.1-72907U10_3cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-nvidia-2.6.11.72032U10_16cl.1.0.7167-71023U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-slmodem-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-BOOT-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-enterprise-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-highmem-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-drbd-2.6.11.72032U10_16cl.0.7.10-71801U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.pentium4.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.athlon.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i586.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/kernel26-smp-module-hsfmodem-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i686.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/drbd-utils-0.7.10-71689U10_2cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/drbd-utils-heartbeat-0.7.10-71689U10_2cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/lm_sensors-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/lm_sensors-sensord-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/lm_sensors-tellerstats-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/liblm_sensors3-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/lm_sensors-doc-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/lm_sensors-devel-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/lm_sensors-devel-static-2.9.0-61067U10_1cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/ndiswrapper-utils-2.6.11.72032U10_16cl.1.1-72907U10_3cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/slmodemd-2.6.11.72032U10_16cl.2.9.10-63168U10_6cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/hsfmodem-progs-2.6.11.72032U10_16cl.7.18.00.03full-63167U10_5cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/libgl1-nvidia-1.0.7167-71010U10_2cl.i386.rpm\r\nftp://atualizacoes.conectiva.com.br/10/RPMS/xfree86-driver-nvidia-1.0.7167-71010U10_2cl.i386.rpm\r\n\r\n\r\nADDITIONAL INSTRUCTIONS\r\n The apt tool can be used to perform RPM packages upgrades:\r\n\r\n - run: apt-get update\r\n - after that, execute: apt-get upgrade\r\n\r\n Detailed instructions regarding the use of apt and upgrade examples \r\n can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en\r\n\r\n- -------------------------------------------------------------------------\r\nAll packages are signed with Conectiva's GPG key. The key and instructions\r\non how to import it can be found at \r\nhttp://distro.conectiva.com.br/seguranca/chave/?idioma=en\r\nInstructions on how to check the signatures of the RPM packages can be\r\nfound at http://distro.conectiva.com.br/seguranca/politica/?idioma=en\r\n\r\n- -------------------------------------------------------------------------\r\nAll our advisories and generic update instructions can be viewed at\r\nhttp://distro.conectiva.com.br/atualizacoes/?idioma=en\r\n\r\n- -------------------------------------------------------------------------\r\nCopyright (c) 2004 Conectiva Inc.\r\nhttp://www.conectiva.com\r\n\r\n- -------------------------------------------------------------------------\r\nsubscribe: conectiva-updates-subscribe@papaleguas.conectiva.com.br\r\nunsubscribe: conectiva-updates-unsubscribe@papaleguas.conectiva.com.br\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.0.6 (GNU/Linux)\r\nComment: For info see http://www.gnupg.org\r\n\r\niD8DBQFCTBdQ42jd0JmAcZARAjzaAJ9H+zayl5Pzo6I0/Lyx56fNIvqrxgCfSFRD\r\nzof3kyHyUCWboXUbHEz9HXg=\r\n=/gGQ\r\n-----END PGP SIGNATURE-----\r\n", "edition": 1, "modified": "2005-04-01T00:00:00", "published": "2005-04-01T00:00:00", "id": "SECURITYVULNS:DOC:8194", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:8194", "title": "[CLA-2005:945] Conectiva Security Announcement - kernel", "type": "securityvulns", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "centos": [{"lastseen": "2019-12-20T18:26:15", "bulletinFamily": "unix", "cvelist": ["CVE-2005-0937", "CVE-2005-0136", "CVE-2005-1264", "CVE-2005-3107", "CVE-2005-0209"], "description": "**CentOS Errata and Security Advisory** CESA-2005:420\n\n\nThe Linux kernel handles the basic functions of the operating system.\r\n\r\nThis is the first regular kernel update to Red Hat Enterprise Linux 4.\r\n\r\nA flaw affecting the auditing code was discovered. On Itanium\r\narchitectures a local user could use this flaw to cause a denial of service\r\n(crash). This issue is rated as having important security impact\r\n(CAN-2005-0136). \r\n\r\nA flaw was discovered in the servicing of a raw device ioctl. A local user\r\nwho has access to raw devices could use this flaw to write to kernel memory\r\nand cause a denial of service or potentially gain privileges. This issue\r\nis rated as having moderate security impact (CAN-2005-1264). \r\n\r\nA flaw in fragment forwarding was discovered that affected the netfilter\r\nsubsystem for certain network interface cards. A remote attacker could send\r\na set of bad fragments and cause a denial of service (system crash). Acenic\r\nand SunGEM network interfaces were the only adapters affected, which are in\r\nwidespread use. (CAN-2005-0209)\r\n\r\nA flaw in the futex functions was discovered affecting the Linux 2.6\r\nkernel. A local user could use this flaw to cause a denial of service\r\n(system crash). (CAN-2005-0937)\r\n\r\nNew features introduced by this update include:\r\n- Fixed TCP BIC congestion handling.\r\n- Diskdump support for more controllers (megaraid, SATA)\r\n- Device mapper multipath support\r\n- AMD64 dual core support.\r\n- Intel ICH7 hardware support.\r\n\r\nThere were many bug fixes in various parts of the kernel. The ongoing\r\neffort to resolve these problems has resulted in a marked improvement\r\nin the reliability and scalability of Red Hat Enterprise Linux 4.\r\n\r\nThe following device drivers have been upgraded to new versions:\r\n ata_piix -------- 1.03\r\n bonding --------- 2.6.1\r\n e1000 ----------- 5.6.10.1-k2-NAPI\r\n e100 ------------ 3.3.6-k2-NAPI\r\n ibmveth --------- 1.03\r\n libata ---------- 1.02 to 1.10\r\n lpfc ------------ 0:8.0.16 to 0:8.0.16.6_x2\r\n megaraid_mbox --- 2.20.4.0 to 2.20.4.5\r\n megaraid_mm ----- 2.20.2.0-rh1 to 2.20.2.5\r\n sata_nv --------- 0.03 to 0.6\r\n sata_promise ---- 1.00 to 1.01\r\n sata_sil -------- 0.8\r\n sata_sis -------- 0.5\r\n sata_svw -------- 1.05\r\n sata_sx4 -------- 0.7\r\n sata_via -------- 1.0\r\n sata_vsc -------- 1.0\r\n tg3 ------------- 3.22-rh\r\n ipw2100 --------- 1.0.3\r\n ipw2200 --------- 1.0.0\r\n\r\nAll Red Hat Enterprise Linux 4 users are advised to upgrade their\r\nkernels to the packages associated with their machine architectures\r\nand configurations as listed in this erratum.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2005-June/023838.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-June/023841.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-June/023846.html\n\n**Affected packages:**\nkernel\nkernel-devel\nkernel-doc\nkernel-hugemem\nkernel-hugemem-devel\nkernel-smp\nkernel-smp-devel\nkernel-sourcecode\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2005-420.html", "edition": 6, "modified": "2005-06-09T11:12:44", "published": "2005-06-08T21:44:09", "href": "http://lists.centos.org/pipermail/centos-announce/2005-June/023838.html", "id": "CESA-2005:420", "title": "kernel security update", "type": "centos", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}], "redhat": [{"lastseen": "2019-12-11T13:31:34", "bulletinFamily": "unix", "cvelist": ["CVE-2005-0136", "CVE-2005-0209", "CVE-2005-0937", "CVE-2005-1264", "CVE-2005-3107"], "description": "The Linux kernel handles the basic functions of the operating system.\r\n\r\nThis is the first regular kernel update to Red Hat Enterprise Linux 4.\r\n\r\nA flaw affecting the auditing code was discovered. On Itanium\r\narchitectures a local user could use this flaw to cause a denial of service\r\n(crash). This issue is rated as having important security impact\r\n(CAN-2005-0136). \r\n\r\nA flaw was discovered in the servicing of a raw device ioctl. A local user\r\nwho has access to raw devices could use this flaw to write to kernel memory\r\nand cause a denial of service or potentially gain privileges. This issue\r\nis rated as having moderate security impact (CAN-2005-1264). \r\n\r\nA flaw in fragment forwarding was discovered that affected the netfilter\r\nsubsystem for certain network interface cards. A remote attacker could send\r\na set of bad fragments and cause a denial of service (system crash). Acenic\r\nand SunGEM network interfaces were the only adapters affected, which are in\r\nwidespread use. (CAN-2005-0209)\r\n\r\nA flaw in the futex functions was discovered affecting the Linux 2.6\r\nkernel. A local user could use this flaw to cause a denial of service\r\n(system crash). (CAN-2005-0937)\r\n\r\nNew features introduced by this update include:\r\n- Fixed TCP BIC congestion handling.\r\n- Diskdump support for more controllers (megaraid, SATA)\r\n- Device mapper multipath support\r\n- AMD64 dual core support.\r\n- Intel ICH7 hardware support.\r\n\r\nThere were many bug fixes in various parts of the kernel. The ongoing\r\neffort to resolve these problems has resulted in a marked improvement\r\nin the reliability and scalability of Red Hat Enterprise Linux 4.\r\n\r\nThe following device drivers have been upgraded to new versions:\r\n ata_piix -------- 1.03\r\n bonding --------- 2.6.1\r\n e1000 ----------- 5.6.10.1-k2-NAPI\r\n e100 ------------ 3.3.6-k2-NAPI\r\n ibmveth --------- 1.03\r\n libata ---------- 1.02 to 1.10\r\n lpfc ------------ 0:8.0.16 to 0:8.0.16.6_x2\r\n megaraid_mbox --- 2.20.4.0 to 2.20.4.5\r\n megaraid_mm ----- 2.20.2.0-rh1 to 2.20.2.5\r\n sata_nv --------- 0.03 to 0.6\r\n sata_promise ---- 1.00 to 1.01\r\n sata_sil -------- 0.8\r\n sata_sis -------- 0.5\r\n sata_svw -------- 1.05\r\n sata_sx4 -------- 0.7\r\n sata_via -------- 1.0\r\n sata_vsc -------- 1.0\r\n tg3 ------------- 3.22-rh\r\n ipw2100 --------- 1.0.3\r\n ipw2200 --------- 1.0.0\r\n\r\nAll Red Hat Enterprise Linux 4 users are advised to upgrade their\r\nkernels to the packages associated with their machine architectures\r\nand configurations as listed in this erratum.", "modified": "2017-09-08T11:48:12", "published": "2005-06-08T04:00:00", "id": "RHSA-2005:420", "href": "https://access.redhat.com/errata/RHSA-2005:420", "type": "redhat", "title": "(RHSA-2005:420) Updated kernel packages available for Red Hat Enterprise Linux 4 Update 1", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}], "nessus": [{"lastseen": "2021-01-06T09:24:49", "description": "Updated kernel packages are now available as part of ongoing support\nand maintenance of Red Hat Enterprise Linux version 4. This is the\nfirst regular update.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update also contained fixes for the security issues named\nCVE-2005-0209 and CVE-2005-0937. No changes have been made to the\npackages associated with this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nThis is the first regular kernel update to Red Hat Enterprise Linux 4.\n\nA flaw affecting the auditing code was discovered. On Itanium\narchitectures a local user could use this flaw to cause a denial of\nservice (crash). This issue is rated as having important security\nimpact (CVE-2005-0136).\n\nA flaw was discovered in the servicing of a raw device ioctl. A local\nuser who has access to raw devices could use this flaw to write to\nkernel memory and cause a denial of service or potentially gain\nprivileges. This issue is rated as having moderate security impact\n(CVE-2005-1264).\n\nA flaw in fragment forwarding was discovered that affected the\nnetfilter subsystem for certain network interface cards. A remote\nattacker could send a set of bad fragments and cause a denial of\nservice (system crash). Acenic and SunGEM network interfaces were the\nonly adapters affected, which are in widespread use. (CVE-2005-0209)\n\nA flaw in the futex functions was discovered affecting the Linux 2.6\nkernel. A local user could use this flaw to cause a denial of service\n(system crash). (CVE-2005-0937)\n\nNew features introduced by this update include: - Fixed TCP BIC\ncongestion handling. - Diskdump support for more controllers\n(megaraid, SATA) - Device mapper multipath support - AMD64 dual core\nsupport. - Intel ICH7 hardware support.\n\nThere were many bug fixes in various parts of the kernel. The ongoing\neffort to resolve these problems has resulted in a marked improvement\nin the reliability and scalability of Red Hat Enterprise Linux 4.\n\nThe following device drivers have been upgraded to new versions:\nata_piix -------- 1.03 bonding --------- 2.6.1 e1000 -----------\n5.6.10.1-k2-NAPI e100 ------------ 3.3.6-k2-NAPI ibmveth ---------\n1.03 libata ---------- 1.02 to 1.10 lpfc ------------ 0:8.0.16 to\n0:8.0.16.6_x2 megaraid_mbox --- 2.20.4.0 to 2.20.4.5 megaraid_mm -----\n2.20.2.0-rh1 to 2.20.2.5 sata_nv --------- 0.03 to 0.6 sata_promise\n---- 1.00 to 1.01 sata_sil -------- 0.8 sata_sis -------- 0.5 sata_svw\n-------- 1.05 sata_sx4 -------- 0.7 sata_via -------- 1.0 sata_vsc\n-------- 1.0 tg3 ------------- 3.22-rh ipw2100 --------- 1.0.3 ipw2200\n--------- 1.0.0\n\nAll Red Hat Enterprise Linux 4 users are advised to upgrade their\nkernels to the packages associated with their machine architectures\nand configurations as listed in this erratum.", "edition": 26, "published": "2006-07-05T00:00:00", "title": "CentOS 4 : kernel (CESA-2005:420)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0937", "CVE-2005-0136", "CVE-2005-1264", "CVE-2005-3107", "CVE-2005-0209"], "modified": "2006-07-05T00:00:00", "cpe": ["p-cpe:/a:centos:centos:kernel-hugemem", "p-cpe:/a:centos:centos:kernel-doc", "cpe:/o:centos:centos:4", "p-cpe:/a:centos:centos:kernel-sourcecode", "p-cpe:/a:centos:centos:kernel-smp", "p-cpe:/a:centos:centos:kernel-devel", "p-cpe:/a:centos:centos:kernel", "p-cpe:/a:centos:centos:kernel-smp-devel", "p-cpe:/a:centos:centos:kernel-hugemem-devel"], "id": "CENTOS_RHSA-2005-420.NASL", "href": "https://www.tenable.com/plugins/nessus/21937", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:420 and \n# CentOS Errata and Security Advisory 2005:420 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(21937);\n script_version(\"1.20\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2005-0136\", \"CVE-2005-0209\", \"CVE-2005-0937\", \"CVE-2005-1264\", \"CVE-2005-3107\");\n script_xref(name:\"RHSA\", value:\"2005:420\");\n\n script_name(english:\"CentOS 4 : kernel (CESA-2005:420)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kernel packages are now available as part of ongoing support\nand maintenance of Red Hat Enterprise Linux version 4. This is the\nfirst regular update.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update also contained fixes for the security issues named\nCVE-2005-0209 and CVE-2005-0937. No changes have been made to the\npackages associated with this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nThis is the first regular kernel update to Red Hat Enterprise Linux 4.\n\nA flaw affecting the auditing code was discovered. On Itanium\narchitectures a local user could use this flaw to cause a denial of\nservice (crash). This issue is rated as having important security\nimpact (CVE-2005-0136).\n\nA flaw was discovered in the servicing of a raw device ioctl. A local\nuser who has access to raw devices could use this flaw to write to\nkernel memory and cause a denial of service or potentially gain\nprivileges. This issue is rated as having moderate security impact\n(CVE-2005-1264).\n\nA flaw in fragment forwarding was discovered that affected the\nnetfilter subsystem for certain network interface cards. A remote\nattacker could send a set of bad fragments and cause a denial of\nservice (system crash). Acenic and SunGEM network interfaces were the\nonly adapters affected, which are in widespread use. (CVE-2005-0209)\n\nA flaw in the futex functions was discovered affecting the Linux 2.6\nkernel. A local user could use this flaw to cause a denial of service\n(system crash). (CVE-2005-0937)\n\nNew features introduced by this update include: - Fixed TCP BIC\ncongestion handling. - Diskdump support for more controllers\n(megaraid, SATA) - Device mapper multipath support - AMD64 dual core\nsupport. - Intel ICH7 hardware support.\n\nThere were many bug fixes in various parts of the kernel. The ongoing\neffort to resolve these problems has resulted in a marked improvement\nin the reliability and scalability of Red Hat Enterprise Linux 4.\n\nThe following device drivers have been upgraded to new versions:\nata_piix -------- 1.03 bonding --------- 2.6.1 e1000 -----------\n5.6.10.1-k2-NAPI e100 ------------ 3.3.6-k2-NAPI ibmveth ---------\n1.03 libata ---------- 1.02 to 1.10 lpfc ------------ 0:8.0.16 to\n0:8.0.16.6_x2 megaraid_mbox --- 2.20.4.0 to 2.20.4.5 megaraid_mm -----\n2.20.2.0-rh1 to 2.20.2.5 sata_nv --------- 0.03 to 0.6 sata_promise\n---- 1.00 to 1.01 sata_sil -------- 0.8 sata_sis -------- 0.5 sata_svw\n-------- 1.05 sata_sx4 -------- 0.7 sata_via -------- 1.0 sata_vsc\n-------- 1.0 tg3 ------------- 3.22-rh ipw2100 --------- 1.0.3 ipw2200\n--------- 1.0.0\n\nAll Red Hat Enterprise Linux 4 users are advised to upgrade their\nkernels to the packages associated with their machine architectures\nand configurations as listed in this erratum.\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2005-June/011800.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d0f01fcc\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2005-June/011803.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?da27f3ba\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2005-June/011808.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?6c64534e\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kernel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-hugemem\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-hugemem-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-smp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-sourcecode\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:4\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2005/02/22\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/06/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/07/05\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^4([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 4.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-4\", reference:\"kernel-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", reference:\"kernel-devel-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", reference:\"kernel-doc-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-hugemem-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-hugemem-devel-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-smp-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-smp-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-smp-devel-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-smp-devel-2.6.9-11.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", reference:\"kernel-sourcecode-2.6.9-11.EL\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel / kernel-devel / kernel-doc / kernel-hugemem / etc\");\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-17T13:05:28", "description": "Updated kernel packages are now available as part of ongoing support\nand maintenance of Red Hat Enterprise Linux version 4. This is the\nfirst regular update.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update also contained fixes for the security issues named\nCVE-2005-0209 and CVE-2005-0937. No changes have been made to the\npackages associated with this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nThis is the first regular kernel update to Red Hat Enterprise Linux 4.\n\nA flaw affecting the auditing code was discovered. On Itanium\narchitectures a local user could use this flaw to cause a denial of\nservice (crash). This issue is rated as having important security\nimpact (CVE-2005-0136).\n\nA flaw was discovered in the servicing of a raw device ioctl. A local\nuser who has access to raw devices could use this flaw to write to\nkernel memory and cause a denial of service or potentially gain\nprivileges. This issue is rated as having moderate security impact\n(CVE-2005-1264).\n\nA flaw in fragment forwarding was discovered that affected the\nnetfilter subsystem for certain network interface cards. A remote\nattacker could send a set of bad fragments and cause a denial of\nservice (system crash). Acenic and SunGEM network interfaces were the\nonly adapters affected, which are in widespread use. (CVE-2005-0209)\n\nA flaw in the futex functions was discovered affecting the Linux 2.6\nkernel. A local user could use this flaw to cause a denial of service\n(system crash). (CVE-2005-0937)\n\nNew features introduced by this update include: - Fixed TCP BIC\ncongestion handling. - Diskdump support for more controllers\n(megaraid, SATA) - Device mapper multipath support - AMD64 dual core\nsupport. - Intel ICH7 hardware support.\n\nThere were many bug fixes in various parts of the kernel. The ongoing\neffort to resolve these problems has resulted in a marked improvement\nin the reliability and scalability of Red Hat Enterprise Linux 4.\n\nThe following device drivers have been upgraded to new versions:\nata_piix -------- 1.03 bonding --------- 2.6.1 e1000 -----------\n5.6.10.1-k2-NAPI e100 ------------ 3.3.6-k2-NAPI ibmveth ---------\n1.03 libata ---------- 1.02 to 1.10 lpfc ------------ 0:8.0.16 to\n0:8.0.16.6_x2 megaraid_mbox --- 2.20.4.0 to 2.20.4.5 megaraid_mm -----\n2.20.2.0-rh1 to 2.20.2.5 sata_nv --------- 0.03 to 0.6 sata_promise\n---- 1.00 to 1.01 sata_sil -------- 0.8 sata_sis -------- 0.5 sata_svw\n-------- 1.05 sata_sx4 -------- 0.7 sata_via -------- 1.0 sata_vsc\n-------- 1.0 tg3 ------------- 3.22-rh ipw2100 --------- 1.0.3 ipw2200\n--------- 1.0.0\n\nAll Red Hat Enterprise Linux 4 users are advised to upgrade their\nkernels to the packages associated with their machine architectures\nand configurations as listed in this erratum.", "edition": 27, "published": "2005-06-10T00:00:00", "title": "RHEL 4 : kernel (RHSA-2005:420)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0937", "CVE-2005-0136", "CVE-2005-1264", "CVE-2005-3107", "CVE-2005-0209"], "modified": "2005-06-10T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:4", "p-cpe:/a:redhat:enterprise_linux:kernel-smp-devel", "p-cpe:/a:redhat:enterprise_linux:kernel-devel", "p-cpe:/a:redhat:enterprise_linux:kernel-hugemem-devel", "p-cpe:/a:redhat:enterprise_linux:kernel-smp", "p-cpe:/a:redhat:enterprise_linux:kernel", "p-cpe:/a:redhat:enterprise_linux:kernel-hugemem", "p-cpe:/a:redhat:enterprise_linux:kernel-doc"], "id": "REDHAT-RHSA-2005-420.NASL", "href": "https://www.tenable.com/plugins/nessus/18444", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:420. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(18444);\n script_version(\"1.28\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2005-0136\", \"CVE-2005-0209\", \"CVE-2005-0937\", \"CVE-2005-1264\", \"CVE-2005-3107\");\n script_xref(name:\"RHSA\", value:\"2005:420\");\n\n script_name(english:\"RHEL 4 : kernel (RHSA-2005:420)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kernel packages are now available as part of ongoing support\nand maintenance of Red Hat Enterprise Linux version 4. This is the\nfirst regular update.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update also contained fixes for the security issues named\nCVE-2005-0209 and CVE-2005-0937. No changes have been made to the\npackages associated with this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nThis is the first regular kernel update to Red Hat Enterprise Linux 4.\n\nA flaw affecting the auditing code was discovered. On Itanium\narchitectures a local user could use this flaw to cause a denial of\nservice (crash). This issue is rated as having important security\nimpact (CVE-2005-0136).\n\nA flaw was discovered in the servicing of a raw device ioctl. A local\nuser who has access to raw devices could use this flaw to write to\nkernel memory and cause a denial of service or potentially gain\nprivileges. This issue is rated as having moderate security impact\n(CVE-2005-1264).\n\nA flaw in fragment forwarding was discovered that affected the\nnetfilter subsystem for certain network interface cards. A remote\nattacker could send a set of bad fragments and cause a denial of\nservice (system crash). Acenic and SunGEM network interfaces were the\nonly adapters affected, which are in widespread use. (CVE-2005-0209)\n\nA flaw in the futex functions was discovered affecting the Linux 2.6\nkernel. A local user could use this flaw to cause a denial of service\n(system crash). (CVE-2005-0937)\n\nNew features introduced by this update include: - Fixed TCP BIC\ncongestion handling. - Diskdump support for more controllers\n(megaraid, SATA) - Device mapper multipath support - AMD64 dual core\nsupport. - Intel ICH7 hardware support.\n\nThere were many bug fixes in various parts of the kernel. The ongoing\neffort to resolve these problems has resulted in a marked improvement\nin the reliability and scalability of Red Hat Enterprise Linux 4.\n\nThe following device drivers have been upgraded to new versions:\nata_piix -------- 1.03 bonding --------- 2.6.1 e1000 -----------\n5.6.10.1-k2-NAPI e100 ------------ 3.3.6-k2-NAPI ibmveth ---------\n1.03 libata ---------- 1.02 to 1.10 lpfc ------------ 0:8.0.16 to\n0:8.0.16.6_x2 megaraid_mbox --- 2.20.4.0 to 2.20.4.5 megaraid_mm -----\n2.20.2.0-rh1 to 2.20.2.5 sata_nv --------- 0.03 to 0.6 sata_promise\n---- 1.00 to 1.01 sata_sil -------- 0.8 sata_sis -------- 0.5 sata_svw\n-------- 1.05 sata_sx4 -------- 0.7 sata_via -------- 1.0 sata_vsc\n-------- 1.0 tg3 ------------- 3.22-rh ipw2100 --------- 1.0.3 ipw2200\n--------- 1.0.0\n\nAll Red Hat Enterprise Linux 4 users are advised to upgrade their\nkernels to the packages associated with their machine architectures\nand configurations as listed in this erratum.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0136\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0209\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0937\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-1264\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-3107\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2005:420\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-hugemem\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-hugemem-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-smp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:4\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2005/02/22\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/08/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/06/10\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2005-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\ninclude(\"ksplice.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^4([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 4.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2005-0136\", \"CVE-2005-0209\", \"CVE-2005-0937\", \"CVE-2005-1264\", \"CVE-2005-3107\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for RHSA-2005:420\");\n }\n else\n {\n __rpm_report = ksplice_reporting_text();\n }\n}\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2005:420\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL4\", reference:\"kernel-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"kernel-devel-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"kernel-doc-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-hugemem-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-hugemem-devel-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-smp-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"x86_64\", reference:\"kernel-smp-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-smp-devel-2.6.9-11.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"x86_64\", reference:\"kernel-smp-devel-2.6.9-11.EL\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel / kernel-devel / kernel-doc / kernel-hugemem / etc\");\n }\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-20T15:45:10", "description": "A remote Denial of Service vulnerability was discovered in the\nNetfilter IP packet handler. This allowed a remote attacker to crash\nthe machine by sending specially crafted IP packet fragments.\n(CAN-2005-0209)\n\nThe Netfilter code also contained a memory leak. Certain locally\ngenerated packet fragments are reassembled twice, which caused a\ndouble allocation of a data structure. This could be locally exploited\nto crash the machine due to kernel memory exhaustion. (CAN-2005-0210)\n\nBen Martel and Stephen Blackheath found a remote Denial of Service\nvulnerability in the PPP driver. This allowed a malicious pppd client\nto crash the server machine. (CAN-2005-0384)\n\nGeorgi Guninski discovered a buffer overflow in the ATM driver. The\natm_get_addr() function does not validate its arguments sufficiently,\nwhich could allow a local attacker to overwrite large portions of\nkernel memory by supplying a negative length argument. This could\neventually lead to arbitrary code execution. (CAN-2005-0531)\n\nGeorgi Guninski also discovered three other integer comparison\nproblems in the TTY layer, in the /proc interface and the ReiserFS\ndriver. However, the previous Ubuntu security update (kernel version\n2.6.8.1-16.11) already contained a patch which checks the arguments to\nthese functions at a higher level and thus prevents these flaws from\nbeing exploited. (CAN-2005-0529, CAN-2005-0530, CAN-2005-0532)\n\nGeorgi Guninski discovered an integer overflow in the sys_epoll_wait()\nfunction which allowed local users to overwrite the first few kB of\nphysical memory. However, very few applications actually use this\nspace (dosemu is a notable exception), but potentially this could lead\nto privilege escalation. (CAN-2005-0736)\n\nEric Anholt discovered a race condition in the Radeon DRI driver. In\nsome cases this allowed a local user with DRI privileges on a Radeon\ncard to execute arbitrary code with root privileges.\n\nFinally this update fixes a regression in the NFS server driver which\nwas introduced in the previous security update (kernel version\n2.6.8.1-16.11). We apologize for the inconvenience.\n(https://bugzilla.ubuntulinux.org/show_bug.cgi?id=6749)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 24, "published": "2006-01-15T00:00:00", "title": "Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-95-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0529", "CVE-2005-0736", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0531", "CVE-2005-0210", "CVE-2005-0532"], "modified": "2006-01-15T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-tree-2.6.8.1", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-k8", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-686", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-k8-smp", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-686", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-686-smp", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-k8", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-source-2.6.8.1", "p-cpe:/a:canonical:ubuntu_linux:linux-doc-2.6.8.1", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-386", "cpe:/o:canonical:ubuntu_linux:4.10", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-686-smp", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-k8-smp", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-386", "p-cpe:/a:canonical:ubuntu_linux:linux-patch-debian-2.6.8.1", "p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-xeon", "p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-xeon"], "id": "UBUNTU_USN-95-1.NASL", "href": "https://www.tenable.com/plugins/nessus/20721", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-95-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(20721);\n script_version(\"1.16\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2005-0209\", \"CVE-2005-0210\", \"CVE-2005-0384\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0531\", \"CVE-2005-0532\", \"CVE-2005-0736\");\n script_xref(name:\"USN\", value:\"95-1\");\n\n script_name(english:\"Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-95-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A remote Denial of Service vulnerability was discovered in the\nNetfilter IP packet handler. This allowed a remote attacker to crash\nthe machine by sending specially crafted IP packet fragments.\n(CAN-2005-0209)\n\nThe Netfilter code also contained a memory leak. Certain locally\ngenerated packet fragments are reassembled twice, which caused a\ndouble allocation of a data structure. This could be locally exploited\nto crash the machine due to kernel memory exhaustion. (CAN-2005-0210)\n\nBen Martel and Stephen Blackheath found a remote Denial of Service\nvulnerability in the PPP driver. This allowed a malicious pppd client\nto crash the server machine. (CAN-2005-0384)\n\nGeorgi Guninski discovered a buffer overflow in the ATM driver. The\natm_get_addr() function does not validate its arguments sufficiently,\nwhich could allow a local attacker to overwrite large portions of\nkernel memory by supplying a negative length argument. This could\neventually lead to arbitrary code execution. (CAN-2005-0531)\n\nGeorgi Guninski also discovered three other integer comparison\nproblems in the TTY layer, in the /proc interface and the ReiserFS\ndriver. However, the previous Ubuntu security update (kernel version\n2.6.8.1-16.11) already contained a patch which checks the arguments to\nthese functions at a higher level and thus prevents these flaws from\nbeing exploited. (CAN-2005-0529, CAN-2005-0530, CAN-2005-0532)\n\nGeorgi Guninski discovered an integer overflow in the sys_epoll_wait()\nfunction which allowed local users to overwrite the first few kB of\nphysical memory. However, very few applications actually use this\nspace (dosemu is a notable exception), but potentially this could lead\nto privilege escalation. (CAN-2005-0736)\n\nEric Anholt discovered a race condition in the Radeon DRI driver. In\nsome cases this allowed a local user with DRI privileges on a Radeon\ncard to execute arbitrary code with root privileges.\n\nFinally this update fixes a regression in the NFS server driver which\nwas introduced in the previous security update (kernel version\n2.6.8.1-16.11). We apologize for the inconvenience.\n(https://bugzilla.ubuntulinux.org/show_bug.cgi?id=6749)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20, 399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-doc-2.6.8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-386\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-686\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-686-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-k8\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-k8-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-headers-2.6.8.1-5-amd64-xeon\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-386\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-686\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-686-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-k8\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-k8-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6.8.1-5-amd64-xeon\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-patch-debian-2.6.8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-source-2.6.8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-tree-2.6.8.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:4.10\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/03/15\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/01/15\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2005-2019 Canonical, Inc. / NASL script (C) 2006-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(4\\.10)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 4.10\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-doc-2.6.8.1\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-386\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-686\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-686-smp\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-amd64-generic\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-amd64-k8\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-amd64-k8-smp\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-headers-2.6.8.1-5-amd64-xeon\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-386\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-686\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-686-smp\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-amd64-generic\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-amd64-k8\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-amd64-k8-smp\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-image-2.6.8.1-5-amd64-xeon\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-patch-debian-2.6.8.1\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-source-2.6.8.1\", pkgver:\"2.6.8.1-16.12\")) flag++;\nif (ubuntu_check(osver:\"4.10\", pkgname:\"linux-tree-2.6.8.1\", pkgver:\"2.6.8.1-16.12\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-doc-2.6.8.1 / linux-headers-2.6.8.1-5 / etc\");\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-07T11:51:27", "description": "Multiple vulnerabilities in the Linux kernel have been discovered and\nfixed in this update. The following have been fixed in the 2.4 \nkernels :\n\nColin Percival discovered a vulnerability in Intel's Hyper-Threading\ntechnology could allow a local user to use a malicious thread to\ncreate covert channels, monitor the execution of other threads, and\nobtain sensitive information such as cryptographic keys via a timing\nattack on memory cache misses. This has been corrected by disabling HT\nsupport in all kernels (CVE-2005-0109).\n\nWhen forwarding fragmented packets, a hardware assisted checksum could\nonly be used once which could lead to a Denial of Service attack or\ncrash by remote users (CVE-2005-0209).\n\nA flaw in the Linux PPP driver was found where on systems allowing\nremote users to connect to a server via PPP, a remote client could\ncause a crash, resulting in a Denial of Service (CVE-2005-0384).\n\nAn information leak in the ext2 filesystem code was found where when a\nnew directory is created, the ext2 block written to disk is not\ninitialized (CVE-2005-0400).\n\nA signedness error in the copy_from_read_buf function in n_tty.c\nallows local users to read kernel memory via a negative argument\n(CVE-2005-0530).\n\nGeorge Guninski discovered a buffer overflow in the ATM driver where\nthe atm_get_addr() function does not validate its arguments\nsufficiently which could allow a local attacker to overwrite large\nportions of kernel memory by supplying a negative length argument.\nThis could potentially lead to the execution of arbitrary code\n(CVE-2005-0531).\n\nA flaw when freeing a pointer in load_elf_library was found that could\nbe abused by a local user to potentially crash the machine causing a\nDenial of Service (CVE-2005-0749).\n\nA problem with the Bluetooth kernel stack in kernels 2.4.6 through\n2.4.30-rc1 and 2.6 through 2.6.11.5 could be used by a local attacker\nto gain root access or crash the machine (CVE-2005-0750).\n\nA race condition in the Radeon DRI driver allows a local user with DRI\nprivileges to execute arbitrary code as root (CVE-2005-0767).\n\nPaul Starzetz found an integer overflow in the ELF binary format\nloader's code dump function in kernels prior to and including\n2.4.31-pre1 and 2.6.12-rc4. By creating and executing a specially\ncrafted ELF executable, a local attacker could exploit this to execute\narbitrary code with root and kernel privileges (CVE-2005-1263).", "edition": 27, "published": "2005-07-01T00:00:00", "title": "Mandrake Linux Security Advisory : kernel-2.4 (MDKSA-2005:111)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0749", "CVE-2005-0767", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0531", "CVE-2005-0109", "CVE-2005-0400", "CVE-2005-1263", "CVE-2005-0750"], "modified": "2005-07-01T00:00:00", "cpe": ["p-cpe:/a:mandriva:linux:kernel-2.4.28.0.rc1.6mdk", "p-cpe:/a:mandriva:linux:kernel-i686-up-4GB-2.4.25.14mdk", "p-cpe:/a:mandriva:linux:kernel-enterprise-2.4.25.14mdk", "cpe:/o:mandrakesoft:mandrake_linux:10.1", "p-cpe:/a:mandriva:linux:kernel-enterprise-2.4.28.0.rc1.6mdk", "cpe:/o:mandrakesoft:mandrake_linux:10.0", "p-cpe:/a:mandriva:linux:kernel-p3-smp-64GB-2.4.25.14mdk", "p-cpe:/a:mandriva:linux:kernel-smp-2.4.25.14mdk", "p-cpe:/a:mandriva:linux:kernel-2.4.25.14mdk", "p-cpe:/a:mandriva:linux:kernel-source", "p-cpe:/a:mandriva:linux:kernel-smp-2.4.28.0.rc1.6mdk", "p-cpe:/a:mandriva:linux:kernel-i586-up-1GB-2.4.28.0.rc1.6mdk", "p-cpe:/a:mandriva:linux:kernel-source-2.4"], "id": "MANDRAKE_MDKSA-2005-111.NASL", "href": "https://www.tenable.com/plugins/nessus/18599", "sourceData": "#%NASL_MIN_LEVEL 70300\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandrake Linux Security Advisory MDKSA-2005:111. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(18599);\n script_version(\"1.24\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2005-0109\", \"CVE-2005-0209\", \"CVE-2005-0384\", \"CVE-2005-0400\", \"CVE-2005-0530\", \"CVE-2005-0531\", \"CVE-2005-0749\", \"CVE-2005-0750\", \"CVE-2005-0767\", \"CVE-2005-1263\");\n script_xref(name:\"MDKSA\", value:\"2005:111\");\n\n script_name(english:\"Mandrake Linux Security Advisory : kernel-2.4 (MDKSA-2005:111)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandrake Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Multiple vulnerabilities in the Linux kernel have been discovered and\nfixed in this update. The following have been fixed in the 2.4 \nkernels :\n\nColin Percival discovered a vulnerability in Intel's Hyper-Threading\ntechnology could allow a local user to use a malicious thread to\ncreate covert channels, monitor the execution of other threads, and\nobtain sensitive information such as cryptographic keys via a timing\nattack on memory cache misses. This has been corrected by disabling HT\nsupport in all kernels (CVE-2005-0109).\n\nWhen forwarding fragmented packets, a hardware assisted checksum could\nonly be used once which could lead to a Denial of Service attack or\ncrash by remote users (CVE-2005-0209).\n\nA flaw in the Linux PPP driver was found where on systems allowing\nremote users to connect to a server via PPP, a remote client could\ncause a crash, resulting in a Denial of Service (CVE-2005-0384).\n\nAn information leak in the ext2 filesystem code was found where when a\nnew directory is created, the ext2 block written to disk is not\ninitialized (CVE-2005-0400).\n\nA signedness error in the copy_from_read_buf function in n_tty.c\nallows local users to read kernel memory via a negative argument\n(CVE-2005-0530).\n\nGeorge Guninski discovered a buffer overflow in the ATM driver where\nthe atm_get_addr() function does not validate its arguments\nsufficiently which could allow a local attacker to overwrite large\nportions of kernel memory by supplying a negative length argument.\nThis could potentially lead to the execution of arbitrary code\n(CVE-2005-0531).\n\nA flaw when freeing a pointer in load_elf_library was found that could\nbe abused by a local user to potentially crash the machine causing a\nDenial of Service (CVE-2005-0749).\n\nA problem with the Bluetooth kernel stack in kernels 2.4.6 through\n2.4.30-rc1 and 2.6 through 2.6.11.5 could be used by a local attacker\nto gain root access or crash the machine (CVE-2005-0750).\n\nA race condition in the Radeon DRI driver allows a local user with DRI\nprivileges to execute arbitrary code as root (CVE-2005-0767).\n\nPaul Starzetz found an integer overflow in the ELF binary format\nloader's code dump function in kernels prior to and including\n2.4.31-pre1 and 2.6.12-rc4. By creating and executing a specially\ncrafted ELF executable, a local attacker could exploit this to execute\narbitrary code with root and kernel privileges (CVE-2005-1263).\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-2.4.25.14mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-2.4.28.0.rc1.6mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-enterprise-2.4.25.14mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-enterprise-2.4.28.0.rc1.6mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i586-up-1GB-2.4.28.0.rc1.6mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i686-up-4GB-2.4.25.14mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-p3-smp-64GB-2.4.25.14mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-smp-2.4.25.14mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-smp-2.4.28.0.rc1.6mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-source\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-source-2.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandrakesoft:mandrake_linux:10.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandrakesoft:mandrake_linux:10.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/06/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/07/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2005-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-2.4.25.14mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", cpu:\"i386\", reference:\"kernel-enterprise-2.4.25.14mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", cpu:\"i386\", reference:\"kernel-i686-up-4GB-2.4.25.14mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", cpu:\"i386\", reference:\"kernel-p3-smp-64GB-2.4.25.14mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-smp-2.4.25.14mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-source-2.4.25-14mdk\", yank:\"mdk\")) flag++;\n\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-2.4.28.0.rc1.6mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", cpu:\"i386\", reference:\"kernel-enterprise-2.4.28.0.rc1.6mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", cpu:\"i386\", reference:\"kernel-i586-up-1GB-2.4.28.0.rc1.6mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-smp-2.4.28.0.rc1.6mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-source-2.4-2.4.28-0.rc1.6mdk\", yank:\"mdk\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-17T14:14:45", "description": "The remote host is missing the patch for the advisory SUSE-SA:2005:018 (kernel).\n\n\nThe Linux kernel is the core component of the Linux system.\n\nSeveral vulnerabilities were reported in the last few weeks which\nare fixed by this update.", "edition": 23, "published": "2005-03-25T00:00:00", "title": "SUSE-SA:2005:018: kernel", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0003", "CVE-2004-1333", "CVE-2005-0529", "CVE-2005-0504", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0210", "CVE-2005-0532", "CVE-2005-0449", "CVE-2004-0814"], "modified": "2005-03-25T00:00:00", "cpe": [], "id": "SUSE_SA_2005_018.NASL", "href": "https://www.tenable.com/plugins/nessus/17617", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# This plugin text was extracted from SuSE Security Advisory SUSE-SA:2005:018\n#\n\n\nif ( ! defined_func(\"bn_random\") ) exit(0);\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif(description)\n{\n script_id(17617);\n script_version(\"1.13\");\n script_cve_id(\"CVE-2004-0814\", \"CVE-2004-1333\", \"CVE-2005-0003\", \"CVE-2005-0209\", \"CVE-2005-0210\", \"CVE-2005-0384\", \"CVE-2005-0449\", \"CVE-2005-0504\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0532\");\n \n name[\"english\"] = \"SUSE-SA:2005:018: kernel\";\n \n script_name(english:name[\"english\"]);\n \n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host is missing a vendor-supplied security patch\" );\n script_set_attribute(attribute:\"description\", value:\n\"The remote host is missing the patch for the advisory SUSE-SA:2005:018 (kernel).\n\n\nThe Linux kernel is the core component of the Linux system.\n\nSeveral vulnerabilities were reported in the last few weeks which\nare fixed by this update.\" );\n script_set_attribute(attribute:\"solution\", value:\n\"http://www.suse.de/security/advisories/2005_18_kernel.html\" );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20, 119, 399);\n\n\n\n\n script_set_attribute(attribute:\"plugin_publication_date\", value: \"2005/03/25\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n script_end_attributes();\n\n \n summary[\"english\"] = \"Check for the version of the kernel package\";\n script_summary(english:summary[\"english\"]);\n \n script_category(ACT_GATHER_INFO);\n \n script_copyright(english:\"This script is Copyright (C) 2005-2021 Tenable Network Security, Inc.\");\n family[\"english\"] = \"SuSE Local Security Checks\";\n script_family(english:family[\"english\"]);\n \n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/SuSE/rpm-list\");\n exit(0);\n}\n\ninclude(\"rpm.inc\");\nif ( rpm_check( reference:\"k_athlon-2.4.20-131\", release:\"SUSE8.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_deflt-2.4.20-131\", release:\"SUSE8.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_psmp-2.4.20-131\", release:\"SUSE8.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_smp-2.4.20-131\", release:\"SUSE8.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-source-2.4.20.SuSE-131\", release:\"SUSE8.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"Intel-536ep-4.62-23\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"Intel-v92ham-4.53-23\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_athlon-2.4.21-280\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_deflt-2.4.21-280\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_smp-2.4.21-280\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_smp4G-2.4.21-280\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"k_um-2.4.21-280\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-source-2.4.21-280\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"ltmodem-8.26a-212\", release:\"SUSE9.0\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-bigsmp-2.6.5-7.151\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-default-2.6.5-7.151\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-smp-2.6.5-7.151\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-source-2.6.5-7.151\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-syms-2.6.5-7.151\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"ltmodem-2.6.2-38.14\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-docs-2.6.5-7.151\", release:\"SUSE9.1\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"Intel-536ep-4.69-5.6\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-bigsmp-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-bigsmp-nongpl-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-default-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-default-nongpl-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-smp-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-smp-nongpl-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-source-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-syms-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-um-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-um-nongpl-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"ltmodem-8.31a8-6.6\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"um-host-install-initrd-1.0-48.6\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"um-host-kernel-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif ( rpm_check( reference:\"kernel-docs-2.6.8-24.13\", release:\"SUSE9.2\") )\n{\n security_hole(0);\n exit(0);\n}\nif (rpm_exists(rpm:\"kernel-\", release:\"SUSE8.2\")\n || rpm_exists(rpm:\"kernel-\", release:\"SUSE9.0\")\n || rpm_exists(rpm:\"kernel-\", release:\"SUSE9.1\")\n || rpm_exists(rpm:\"kernel-\", release:\"SUSE9.2\") )\n{\n set_kb_item(name:\"CVE-2004-0814\", value:TRUE);\n set_kb_item(name:\"CVE-2004-1333\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0003\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0209\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0210\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0384\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0449\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0504\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0529\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0530\", value:TRUE);\n set_kb_item(name:\"CVE-2005-0532\", value:TRUE);\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-06T09:24:48", "description": "Updated kernel packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the\nRed Hat Security Response Team.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update fixed the security issue named CVE-2005-0210 but not\nCVE-2005-0209. The issue CVE-2005-0209 was actually fixed by\nRHSA-2005:420. No changes have been made to the packages associated\nwith this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nA flaw in the fib_seq_start function was discovered. A local user\ncould use this flaw to cause a denial of service (system crash) via\n/proc/net/route. (CVE-2005-1041)\n\nA flaw in the tmpfs file system was discovered. A local user could use\nthis flaw to cause a denial of service (system crash). (CVE-2005-0977)\n\nAn integer overflow flaw was found when writing to a sysfs file. A\nlocal user could use this flaw to overwrite kernel memory, causing a\ndenial of service (system crash) or arbitrary code execution.\n(CVE-2005-0867)\n\nKeith Owens reported a flaw in the Itanium unw_unwind_to_user\nfunction. A local user could use this flaw to cause a denial of\nservice (system crash) on Itanium architectures. (CVE-2005-0135)\n\nA flaw in the NFS client O_DIRECT error case handling was discovered.\nA local user could use this flaw to cause a denial of service (system\ncrash). (CVE-2005-0207)\n\nA small memory leak when defragmenting local packets was discovered\nthat affected the Linux 2.6 kernel netfilter subsystem. A local user\ncould send a large number of carefully crafted fragments leading to\nmemory exhaustion (CVE-2005-0210)\n\nA flaw was discovered in the Linux PPP driver. On systems allowing\nremote users to connect to a server using ppp, a remote client could\ncause a denial of service (system crash). (CVE-2005-0384)\n\nA flaw was discovered in the ext2 file system code. When a new\ndirectory is created, the ext2 block written to disk is not\ninitialized, which could lead to an information leak if a disk image\nis made available to unprivileged users. (CVE-2005-0400)\n\nA flaw in fragment queuing was discovered that affected the Linux\nkernel netfilter subsystem. On systems configured to filter or process\nnetwork packets (e.g. firewalling), a remote attacker could send a\ncarefully crafted set of fragmented packets to a machine and cause a\ndenial of service (system crash). In order to sucessfully exploit this\nflaw, the attacker would need to know or guess some aspects of the\nfirewall ruleset on the target system. (CVE-2005-0449)\n\nA number of flaws were found in the Linux 2.6 kernel. A local user\ncould use these flaws to read kernel memory or cause a denial of\nservice (crash). (CVE-2005-0529, CVE-2005-0530, CVE-2005-0531)\n\nAn integer overflow in sys_epoll_wait in eventpoll.c was discovered. A\nlocal user could use this flaw to overwrite low kernel memory. This\nmemory is usually unused, not usually resulting in a security\nconsequence. (CVE-2005-0736)\n\nA flaw when freeing a pointer in load_elf_library was discovered. A\nlocal user could potentially use this flaw to cause a denial of\nservice (crash). (CVE-2005-0749)\n\nA flaw was discovered in the bluetooth driver system. On systems where\nthe bluetooth modules are loaded, a local user could use this flaw to\ngain elevated (root) privileges. (CVE-2005-0750)\n\nA race condition was discovered that affected the Radeon DRI driver. A\nlocal user who has DRI privileges on a Radeon graphics card may be\nable to use this flaw to gain root privileges. (CVE-2005-0767)\n\nMultiple range checking flaws were discovered in the iso9660 file\nsystem handler. An attacker could create a malicious file system image\nwhich would cause a denial or service or potentially execute arbitrary\ncode if mounted. (CVE-2005-0815)\n\nA flaw was discovered when setting line discipline on a serial tty. A\nlocal user may be able to use this flaw to inject mouse movements or\nkeystrokes when another user is logged in. (CVE-2005-0839)\n\nRed Hat Enterprise Linux 4 users are advised to upgrade their kernels\nto the packages associated with their machine architectures and\nconfigurations as listed in this erratum.\n\nPlease note that", "edition": 27, "published": "2006-07-05T00:00:00", "title": "CentOS 3 / 4 : kernel (CESA-2005:366)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0749", "CVE-2005-0135", "CVE-2005-0529", "CVE-2005-1041", "CVE-2005-0736", "CVE-2005-0767", "CVE-2005-0207", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0531", "CVE-2005-0210", "CVE-2005-0815", "CVE-2005-0867", "CVE-2005-0449", "CVE-2005-0839", "CVE-2005-0400", "CVE-2005-0750", "CVE-2005-0977"], "modified": "2006-07-05T00:00:00", "cpe": ["p-cpe:/a:centos:centos:kernel-hugemem", "p-cpe:/a:centos:centos:kernel-doc", "cpe:/o:centos:centos:4", "p-cpe:/a:centos:centos:kernel-sourcecode", "p-cpe:/a:centos:centos:kernel-smp", "p-cpe:/a:centos:centos:kernel-devel", "p-cpe:/a:centos:centos:kernel", "p-cpe:/a:centos:centos:kernel-smp-devel", "cpe:/o:centos:centos:3", "p-cpe:/a:centos:centos:kernel-hugemem-devel"], "id": "CENTOS_RHSA-2005-366.NASL", "href": "https://www.tenable.com/plugins/nessus/21928", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:366 and \n# CentOS Errata and Security Advisory 2005:366 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(21928);\n script_version(\"1.29\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2005-0135\", \"CVE-2005-0207\", \"CVE-2005-0209\", \"CVE-2005-0210\", \"CVE-2005-0384\", \"CVE-2005-0400\", \"CVE-2005-0449\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0531\", \"CVE-2005-0736\", \"CVE-2005-0749\", \"CVE-2005-0750\", \"CVE-2005-0767\", \"CVE-2005-0815\", \"CVE-2005-0839\", \"CVE-2005-0867\", \"CVE-2005-0977\", \"CVE-2005-1041\");\n script_xref(name:\"RHSA\", value:\"2005:366\");\n\n script_name(english:\"CentOS 3 / 4 : kernel (CESA-2005:366)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kernel packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the\nRed Hat Security Response Team.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update fixed the security issue named CVE-2005-0210 but not\nCVE-2005-0209. The issue CVE-2005-0209 was actually fixed by\nRHSA-2005:420. No changes have been made to the packages associated\nwith this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nA flaw in the fib_seq_start function was discovered. A local user\ncould use this flaw to cause a denial of service (system crash) via\n/proc/net/route. (CVE-2005-1041)\n\nA flaw in the tmpfs file system was discovered. A local user could use\nthis flaw to cause a denial of service (system crash). (CVE-2005-0977)\n\nAn integer overflow flaw was found when writing to a sysfs file. A\nlocal user could use this flaw to overwrite kernel memory, causing a\ndenial of service (system crash) or arbitrary code execution.\n(CVE-2005-0867)\n\nKeith Owens reported a flaw in the Itanium unw_unwind_to_user\nfunction. A local user could use this flaw to cause a denial of\nservice (system crash) on Itanium architectures. (CVE-2005-0135)\n\nA flaw in the NFS client O_DIRECT error case handling was discovered.\nA local user could use this flaw to cause a denial of service (system\ncrash). (CVE-2005-0207)\n\nA small memory leak when defragmenting local packets was discovered\nthat affected the Linux 2.6 kernel netfilter subsystem. A local user\ncould send a large number of carefully crafted fragments leading to\nmemory exhaustion (CVE-2005-0210)\n\nA flaw was discovered in the Linux PPP driver. On systems allowing\nremote users to connect to a server using ppp, a remote client could\ncause a denial of service (system crash). (CVE-2005-0384)\n\nA flaw was discovered in the ext2 file system code. When a new\ndirectory is created, the ext2 block written to disk is not\ninitialized, which could lead to an information leak if a disk image\nis made available to unprivileged users. (CVE-2005-0400)\n\nA flaw in fragment queuing was discovered that affected the Linux\nkernel netfilter subsystem. On systems configured to filter or process\nnetwork packets (e.g. firewalling), a remote attacker could send a\ncarefully crafted set of fragmented packets to a machine and cause a\ndenial of service (system crash). In order to sucessfully exploit this\nflaw, the attacker would need to know or guess some aspects of the\nfirewall ruleset on the target system. (CVE-2005-0449)\n\nA number of flaws were found in the Linux 2.6 kernel. A local user\ncould use these flaws to read kernel memory or cause a denial of\nservice (crash). (CVE-2005-0529, CVE-2005-0530, CVE-2005-0531)\n\nAn integer overflow in sys_epoll_wait in eventpoll.c was discovered. A\nlocal user could use this flaw to overwrite low kernel memory. This\nmemory is usually unused, not usually resulting in a security\nconsequence. (CVE-2005-0736)\n\nA flaw when freeing a pointer in load_elf_library was discovered. A\nlocal user could potentially use this flaw to cause a denial of\nservice (crash). (CVE-2005-0749)\n\nA flaw was discovered in the bluetooth driver system. On systems where\nthe bluetooth modules are loaded, a local user could use this flaw to\ngain elevated (root) privileges. (CVE-2005-0750)\n\nA race condition was discovered that affected the Radeon DRI driver. A\nlocal user who has DRI privileges on a Radeon graphics card may be\nable to use this flaw to gain root privileges. (CVE-2005-0767)\n\nMultiple range checking flaws were discovered in the iso9660 file\nsystem handler. An attacker could create a malicious file system image\nwhich would cause a denial or service or potentially execute arbitrary\ncode if mounted. (CVE-2005-0815)\n\nA flaw was discovered when setting line discipline on a serial tty. A\nlocal user may be able to use this flaw to inject mouse movements or\nkeystrokes when another user is logged in. (CVE-2005-0839)\n\nRed Hat Enterprise Linux 4 users are advised to upgrade their kernels\nto the packages associated with their machine architectures and\nconfigurations as listed in this erratum.\n\nPlease note that\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2005-April/011579.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?dd8bca78\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2005-April/011583.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?802b4bd2\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kernel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20, 399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-hugemem\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-hugemem-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-smp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:kernel-sourcecode\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:4\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2005/03/09\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/04/19\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/07/05\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(3|4)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 3.x / 4.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-3\", cpu:\"ia64\", reference:\"kernel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"ia64\", reference:\"kernel-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"ia64\", reference:\"kernel-doc-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"ia64\", reference:\"kernel-sourcecode-2.6.9-5.0.5.EL\")) flag++;\n\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-doc-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-doc-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-hugemem-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-hugemem-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-hugemem-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-smp-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-smp-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-smp-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-smp-devel-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"kernel-sourcecode-2.6.9-5.0.5.EL\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"kernel-sourcecode-2.6.9-5.0.5.EL\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel / kernel-devel / kernel-doc / kernel-hugemem / etc\");\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-17T13:05:27", "description": "Updated kernel packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the\nRed Hat Security Response Team.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update fixed the security issue named CVE-2005-0210 but not\nCVE-2005-0209. The issue CVE-2005-0209 was actually fixed by\nRHSA-2005:420. No changes have been made to the packages associated\nwith this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nA flaw in the fib_seq_start function was discovered. A local user\ncould use this flaw to cause a denial of service (system crash) via\n/proc/net/route. (CVE-2005-1041)\n\nA flaw in the tmpfs file system was discovered. A local user could use\nthis flaw to cause a denial of service (system crash). (CVE-2005-0977)\n\nAn integer overflow flaw was found when writing to a sysfs file. A\nlocal user could use this flaw to overwrite kernel memory, causing a\ndenial of service (system crash) or arbitrary code execution.\n(CVE-2005-0867)\n\nKeith Owens reported a flaw in the Itanium unw_unwind_to_user\nfunction. A local user could use this flaw to cause a denial of\nservice (system crash) on Itanium architectures. (CVE-2005-0135)\n\nA flaw in the NFS client O_DIRECT error case handling was discovered.\nA local user could use this flaw to cause a denial of service (system\ncrash). (CVE-2005-0207)\n\nA small memory leak when defragmenting local packets was discovered\nthat affected the Linux 2.6 kernel netfilter subsystem. A local user\ncould send a large number of carefully crafted fragments leading to\nmemory exhaustion (CVE-2005-0210)\n\nA flaw was discovered in the Linux PPP driver. On systems allowing\nremote users to connect to a server using ppp, a remote client could\ncause a denial of service (system crash). (CVE-2005-0384)\n\nA flaw was discovered in the ext2 file system code. When a new\ndirectory is created, the ext2 block written to disk is not\ninitialized, which could lead to an information leak if a disk image\nis made available to unprivileged users. (CVE-2005-0400)\n\nA flaw in fragment queuing was discovered that affected the Linux\nkernel netfilter subsystem. On systems configured to filter or process\nnetwork packets (e.g. firewalling), a remote attacker could send a\ncarefully crafted set of fragmented packets to a machine and cause a\ndenial of service (system crash). In order to sucessfully exploit this\nflaw, the attacker would need to know or guess some aspects of the\nfirewall ruleset on the target system. (CVE-2005-0449)\n\nA number of flaws were found in the Linux 2.6 kernel. A local user\ncould use these flaws to read kernel memory or cause a denial of\nservice (crash). (CVE-2005-0529, CVE-2005-0530, CVE-2005-0531)\n\nAn integer overflow in sys_epoll_wait in eventpoll.c was discovered. A\nlocal user could use this flaw to overwrite low kernel memory. This\nmemory is usually unused, not usually resulting in a security\nconsequence. (CVE-2005-0736)\n\nA flaw when freeing a pointer in load_elf_library was discovered. A\nlocal user could potentially use this flaw to cause a denial of\nservice (crash). (CVE-2005-0749)\n\nA flaw was discovered in the bluetooth driver system. On systems where\nthe bluetooth modules are loaded, a local user could use this flaw to\ngain elevated (root) privileges. (CVE-2005-0750)\n\nA race condition was discovered that affected the Radeon DRI driver. A\nlocal user who has DRI privileges on a Radeon graphics card may be\nable to use this flaw to gain root privileges. (CVE-2005-0767)\n\nMultiple range checking flaws were discovered in the iso9660 file\nsystem handler. An attacker could create a malicious file system image\nwhich would cause a denial or service or potentially execute arbitrary\ncode if mounted. (CVE-2005-0815)\n\nA flaw was discovered when setting line discipline on a serial tty. A\nlocal user may be able to use this flaw to inject mouse movements or\nkeystrokes when another user is logged in. (CVE-2005-0839)\n\nRed Hat Enterprise Linux 4 users are advised to upgrade their kernels\nto the packages associated with their machine architectures and\nconfigurations as listed in this erratum.\n\nPlease note that", "edition": 27, "published": "2005-04-19T00:00:00", "title": "RHEL 4 : kernel (RHSA-2005:366)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0749", "CVE-2005-0135", "CVE-2005-0529", "CVE-2005-1041", "CVE-2005-0736", "CVE-2005-0767", "CVE-2005-0207", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0531", "CVE-2005-0210", "CVE-2005-0815", "CVE-2005-0867", "CVE-2005-0449", "CVE-2005-0839", "CVE-2005-0400", "CVE-2005-0750", "CVE-2005-0977"], "modified": "2005-04-19T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:4", "p-cpe:/a:redhat:enterprise_linux:kernel-smp-devel", "p-cpe:/a:redhat:enterprise_linux:kernel-devel", "p-cpe:/a:redhat:enterprise_linux:kernel-hugemem-devel", "p-cpe:/a:redhat:enterprise_linux:kernel-smp", "p-cpe:/a:redhat:enterprise_linux:kernel", "p-cpe:/a:redhat:enterprise_linux:kernel-hugemem", "p-cpe:/a:redhat:enterprise_linux:kernel-doc"], "id": "REDHAT-RHSA-2005-366.NASL", "href": "https://www.tenable.com/plugins/nessus/18095", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:366. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(18095);\n script_version(\"1.36\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2005-0135\", \"CVE-2005-0207\", \"CVE-2005-0209\", \"CVE-2005-0210\", \"CVE-2005-0384\", \"CVE-2005-0400\", \"CVE-2005-0449\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0531\", \"CVE-2005-0736\", \"CVE-2005-0749\", \"CVE-2005-0750\", \"CVE-2005-0767\", \"CVE-2005-0815\", \"CVE-2005-0839\", \"CVE-2005-0867\", \"CVE-2005-0977\", \"CVE-2005-1041\");\n script_xref(name:\"RHSA\", value:\"2005:366\");\n\n script_name(english:\"RHEL 4 : kernel (RHSA-2005:366)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated kernel packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the\nRed Hat Security Response Team.\n\n[Updated 9 August 2005] The advisory text has been updated to show\nthat this update fixed the security issue named CVE-2005-0210 but not\nCVE-2005-0209. The issue CVE-2005-0209 was actually fixed by\nRHSA-2005:420. No changes have been made to the packages associated\nwith this advisory.\n\nThe Linux kernel handles the basic functions of the operating system.\n\nA flaw in the fib_seq_start function was discovered. A local user\ncould use this flaw to cause a denial of service (system crash) via\n/proc/net/route. (CVE-2005-1041)\n\nA flaw in the tmpfs file system was discovered. A local user could use\nthis flaw to cause a denial of service (system crash). (CVE-2005-0977)\n\nAn integer overflow flaw was found when writing to a sysfs file. A\nlocal user could use this flaw to overwrite kernel memory, causing a\ndenial of service (system crash) or arbitrary code execution.\n(CVE-2005-0867)\n\nKeith Owens reported a flaw in the Itanium unw_unwind_to_user\nfunction. A local user could use this flaw to cause a denial of\nservice (system crash) on Itanium architectures. (CVE-2005-0135)\n\nA flaw in the NFS client O_DIRECT error case handling was discovered.\nA local user could use this flaw to cause a denial of service (system\ncrash). (CVE-2005-0207)\n\nA small memory leak when defragmenting local packets was discovered\nthat affected the Linux 2.6 kernel netfilter subsystem. A local user\ncould send a large number of carefully crafted fragments leading to\nmemory exhaustion (CVE-2005-0210)\n\nA flaw was discovered in the Linux PPP driver. On systems allowing\nremote users to connect to a server using ppp, a remote client could\ncause a denial of service (system crash). (CVE-2005-0384)\n\nA flaw was discovered in the ext2 file system code. When a new\ndirectory is created, the ext2 block written to disk is not\ninitialized, which could lead to an information leak if a disk image\nis made available to unprivileged users. (CVE-2005-0400)\n\nA flaw in fragment queuing was discovered that affected the Linux\nkernel netfilter subsystem. On systems configured to filter or process\nnetwork packets (e.g. firewalling), a remote attacker could send a\ncarefully crafted set of fragmented packets to a machine and cause a\ndenial of service (system crash). In order to sucessfully exploit this\nflaw, the attacker would need to know or guess some aspects of the\nfirewall ruleset on the target system. (CVE-2005-0449)\n\nA number of flaws were found in the Linux 2.6 kernel. A local user\ncould use these flaws to read kernel memory or cause a denial of\nservice (crash). (CVE-2005-0529, CVE-2005-0530, CVE-2005-0531)\n\nAn integer overflow in sys_epoll_wait in eventpoll.c was discovered. A\nlocal user could use this flaw to overwrite low kernel memory. This\nmemory is usually unused, not usually resulting in a security\nconsequence. (CVE-2005-0736)\n\nA flaw when freeing a pointer in load_elf_library was discovered. A\nlocal user could potentially use this flaw to cause a denial of\nservice (crash). (CVE-2005-0749)\n\nA flaw was discovered in the bluetooth driver system. On systems where\nthe bluetooth modules are loaded, a local user could use this flaw to\ngain elevated (root) privileges. (CVE-2005-0750)\n\nA race condition was discovered that affected the Radeon DRI driver. A\nlocal user who has DRI privileges on a Radeon graphics card may be\nable to use this flaw to gain root privileges. (CVE-2005-0767)\n\nMultiple range checking flaws were discovered in the iso9660 file\nsystem handler. An attacker could create a malicious file system image\nwhich would cause a denial or service or potentially execute arbitrary\ncode if mounted. (CVE-2005-0815)\n\nA flaw was discovered when setting line discipline on a serial tty. A\nlocal user may be able to use this flaw to inject mouse movements or\nkeystrokes when another user is logged in. (CVE-2005-0839)\n\nRed Hat Enterprise Linux 4 users are advised to upgrade their kernels\nto the packages associated with their machine architectures and\nconfigurations as listed in this erratum.\n\nPlease note that\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0135\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0207\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0210\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0384\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0400\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0449\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0529\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0530\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0531\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0736\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0749\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0750\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0767\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0815\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0839\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0867\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-0977\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2005-1041\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2005:366\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20, 399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-hugemem\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-hugemem-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-smp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:kernel-smp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:4\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2005/03/09\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/08/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/04/19\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2005-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\ninclude(\"ksplice.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^4([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 4.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CAN-2005-0135\", \"CAN-2005-0207\", \"CAN-2005-0209\", \"CAN-2005-0210\", \"CAN-2005-0384\", \"CAN-2005-0400\", \"CAN-2005-0449\", \"CAN-2005-0529\", \"CAN-2005-0530\", \"CAN-2005-0531\", \"CAN-2005-0736\", \"CAN-2005-0749\", \"CAN-2005-0750\", \"CAN-2005-0767\", \"CAN-2005-0815\", \"CAN-2005-0839\", \"CAN-2005-0867\", \"CAN-2005-0977\", \"CAN-2005-1041\", \"CVE-2005-0135\", \"CVE-2005-0207\", \"CVE-2005-0209\", \"CVE-2005-0210\", \"CVE-2005-0384\", \"CVE-2005-0400\", \"CVE-2005-0449\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0531\", \"CVE-2005-0736\", \"CVE-2005-0749\", \"CVE-2005-0750\", \"CVE-2005-0767\", \"CVE-2005-0815\", \"CVE-2005-0839\", \"CVE-2005-0867\", \"CVE-2005-0977\", \"CVE-2005-1041\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for RHSA-2005:366\");\n }\n else\n {\n __rpm_report = ksplice_reporting_text();\n }\n}\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2005:366\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL4\", reference:\"kernel-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"kernel-devel-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", reference:\"kernel-doc-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-hugemem-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-hugemem-devel-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-smp-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"x86_64\", reference:\"kernel-smp-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"i686\", reference:\"kernel-smp-devel-2.6.9-5.0.5.EL\")) flag++;\n if (rpm_check(release:\"RHEL4\", cpu:\"x86_64\", reference:\"kernel-smp-devel-2.6.9-5.0.5.EL\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel / kernel-devel / kernel-doc / kernel-hugemem / etc\");\n }\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-01-07T11:51:27", "description": "Multiple vulnerabilities in the Linux kernel have been discovered and\nfixed in this update. The following CVE names have been fixed in the\nLE2005 kernel :\n\nColin Percival discovered a vulnerability in Intel's Hyper-Threading\ntechnology could allow a local user to use a malicious thread to\ncreate covert channels, monitor the execution of other threads, and\nobtain sensitive information such as cryptographic keys via a timing\nattack on memory cache misses. This has been corrected by disabling HT\nsupport in all kernels (CVE-2005-0109).\n\nAn information leak in the ext2 filesystem code in kernels prior to\n2.6.11.6 was found where when a new directory is created, the ext2\nblock written to disk is not initialized (CVE-2005-0400).\n\nA flaw when freeing a pointer in load_elf_library was found in kernels\nprior to 2.6.11.6 that could be abused by a local user to potentially\ncrash the machine causing a Denial of Service (CVE-2005-0749).\n\nA problem with the Bluetooth kernel stack in kernels 2.4.6 through\n2.4.30-rc1 and 2.6 through 2.6.11.5 could be used by a local attacker\nto gain root access or crash the machine (CVE-2005-0750).\n\nPaul Starzetz found an integer overflow in the ELF binary format\nloader's code dump function in kernels prior to and including\n2.4.31-pre1 and 2.6.12-rc4. By creating and executing a specially\ncrafted ELF executable, a local attacker could exploit this to execute\narbitrary code with root and kernel privileges (CVE-2005-1263).\n\nThe drivers for raw devices used the wrong function to pass arguments\nto the underlying block device in 2.6.x kernels. This made the kernel\naddress space accessible to user-space applications allowing any local\nuser with at least read access to a device in /dev/raw/* (usually only\nroot) to execute arbitrary code with kernel privileges\n(CVE-2005-1264).\n\nThe it87 and via686a hardware monitor drivers in kernels prior to\n2.6.11.8 and 2.6.12 prior to 2.6.12-rc2 created a sysfs file named\n'alarms' with write permissions although they are not designed to be\nwritable. This allowed a local user to crash the kernel by attempting\nto write to these files (CVE-2005-1369).\n\nIn addition to the above-noted CVE-2005-0109, CVE-2005-0400,\nCVE-2005-0749, CVE-2005-0750, and CVE-2005-1369 fixes, the following\nCVE names have been fixed in the 10.1 kernel :\n\nThe POSIX Capability Linux Security Module (LSM) for 2.6 kernels up to\nand including 2.6.8.1 did not properly handle the credentials of a\nprocess that is launched before the module is loaded, which could be\nused by local attackers to gain elevated privileges (CVE-2004-1337).\n\nA flaw in the Linux PPP driver in kernel 2.6.8.1 was found where on\nsystems allowing remote users to connect to a server via PPP, a remote\nclient could cause a crash, resulting in a Denial of Service\n(CVE-2005-0384).\n\nGeorge Guninski discovered a buffer overflow in the ATM driver in\nkernels 2.6.10 and 2.6.11 before 2.6.11-rc4 where the atm_get_addr()\nfunction does not validate its arguments sufficiently which could\nallow a local attacker to overwrite large portions of kernel memory by\nsupplying a negative length argument. This could potentially lead to\nthe execution of arbitrary code (CVE-2005-0531).\n\nThe reiserfs_copy_from_user_to_file_region function in reiserfs/file.c\nbefore kernel 2.6.11, when running on 64-bit architectures, could\nallow local users to trigger a buffer overflow as a result of casting\ndiscrepancies between size_t and int data types. This could allow an\nattacker to overwrite kernel memory, crash the machine, or potentially\nobtain root access (CVE-2005-0532).\n\nA race condition in the Radeon DRI driver in kernel 2.6.8.1 allows a\nlocal user with DRI privileges to execute arbitrary code as root\n(CVE-2005-0767).\n\nAccess was not restricted to the N_MOUSE discipline for a TTY in\nkernels prior to 2.6.11. This could allow local attackers to obtain\nelevated privileges by injecting mouse or keyboard events into other\nuser's sessions (CVE-2005-0839).\n\nSome futex functions in futex.c in 2.6 kernels performed get_user\ncalls while holding the mmap_sem semaphore, which could allow a local\nattacker to cause a deadlock condition in do_page_fault by triggering\nget_user faults while another thread is executing mmap or other\nfunctions (CVE-2005-0937).\n\nIn addition to the above-noted CVE-2004-1337, CVE-2005-0109,\nCVE-2005-0384, CVE-2005-0400, CVE-2005-0531, CVE-2005-0532,\nCVE-2005-0749, CVE-2005-0750, CVE-2005-0767, CVE-2005-0839,\nCVE-2005-0937, CVE-2005-1263, CVE-2005-1264, and CVE-2005-1369 fixes,\nthe following CVE names have been fixed in the 10.0/ Corporate 3.0\nkernels :\n\nA race condition in the setsid function in kernels before 2.6.8.1\ncould allow a local attacker to cause a Denial of Service and possibly\naccess portions of kernel memory related to TTY changes, locking, and\nsemaphores (CVE-2005-0178).\n\nWhen forwarding fragmented packets in kernel 2.6.8.1, a hardware\nassisted checksum could only be used once which could lead to a Denial\nof Service attack or crash by remote users (CVE-2005-0209).\n\nA signedness error in the copy_from_read_buf function in n_tty.c\nbefore kernel 2.6.11 allows local users to read kernel memory via a\nnegative argument (CVE-2005-0530).\n\nA vulnerability in the fib_seq_start() function allowed a local user\nto crash the system by readiung /proc/net/route in a certain way,\ncausing a Denial of Service (CVE-2005-1041).\n\nA vulnerability in the Direct Rendering Manager (DRM) driver in the\n2.6 kernel does not properly check the DMA lock, which could allow\nremote attackers or local users to cause a Denial of Service (X Server\ncrash) and possibly modify the video output (CVE-2004-1056).", "edition": 27, "published": "2005-07-01T00:00:00", "title": "Mandrake Linux Security Advisory : kernel (MDKSA-2005:110)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2006-3634", "CVE-2005-0749", "CVE-2005-0937", "CVE-2005-1041", "CVE-2005-1264", "CVE-2005-1369", "CVE-2005-0767", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0531", "CVE-2004-1056", "CVE-2005-0532", "CVE-2005-0109", "CVE-2005-0839", "CVE-2005-0400", "CVE-2005-0178", "CVE-2004-1337", "CVE-2005-1263", "CVE-2005-0750"], "modified": "2005-07-01T00:00:00", "cpe": ["p-cpe:/a:mandriva:linux:kernel-i686-up-4GB-2.6.11.12mdk", "p-cpe:/a:mandriva:linux:kernel-smp-2.6.3.27mdk", "cpe:/o:mandrakesoft:mandrake_linux:10.1", "p-cpe:/a:mandriva:linux:kernel-enterprise-2.6.3.27mdk", "p-cpe:/a:mandriva:linux:kernel-enterprise-2.6.8.1.25mdk", "p-cpe:/a:mandriva:linux:kernel-smp-2.6.11.12mdk", "cpe:/o:mandrakesoft:mandrake_linux:10.0", "p-cpe:/a:mandriva:linux:kernel-p3-smp-64GB-2.6.3.27mdk", "p-cpe:/a:mandriva:linux:kernel-source-2.6", "p-cpe:/a:mandriva:linux:kernel-source-stripped", "p-cpe:/a:mandriva:linux:kernel-source-stripped-2.6", "p-cpe:/a:mandriva:linux:kernel-2.6.8.1.25mdk", "p-cpe:/a:mandriva:linux:kernel-2.6.11.12mdk", "p-cpe:/a:mandriva:linux:kernel-secure-2.6.8.1.25mdk", "p-cpe:/a:mandriva:linux:kernel-2.6.3.27mdk", "p-cpe:/a:mandriva:linux:kernel-i586-up-1GB-2.6.8.1.25mdk", "p-cpe:/a:mandriva:linux:kernel-source", "x-cpe:/o:mandrakesoft:mandrake_linux:le2005", "p-cpe:/a:mandriva:linux:kernel-i586-up-1GB-2.6.11.12mdk", "p-cpe:/a:mandriva:linux:kernel-i686-up-4GB-2.6.3.27mdk", "p-cpe:/a:mandriva:linux:kernel-smp-2.6.8.1.25mdk", "p-cpe:/a:mandriva:linux:kernel-i686-up-64GB-2.6.8.1.25mdk", "p-cpe:/a:mandriva:linux:kernel-xbox-2.6.11.12mdk", "p-cpe:/a:mandriva:linux:kernel-secure-2.6.3.27mdk"], "id": "MANDRAKE_MDKSA-2005-110.NASL", "href": "https://www.tenable.com/plugins/nessus/18598", "sourceData": "#%NASL_MIN_LEVEL 70300\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandrake Linux Security Advisory MDKSA-2005:110. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(18598);\n script_version(\"1.25\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2004-1056\", \"CVE-2004-1337\", \"CVE-2005-0109\", \"CVE-2005-0178\", \"CVE-2005-0209\", \"CVE-2005-0384\", \"CVE-2005-0400\", \"CVE-2005-0530\", \"CVE-2005-0531\", \"CVE-2005-0532\", \"CVE-2005-0749\", \"CVE-2005-0750\", \"CVE-2005-0767\", \"CVE-2005-0839\", \"CVE-2005-0937\", \"CVE-2005-1041\", \"CVE-2005-1263\", \"CVE-2005-1264\", \"CVE-2005-1369\", \"CVE-2006-3634\");\n script_xref(name:\"MDKSA\", value:\"2005:110\");\n\n script_name(english:\"Mandrake Linux Security Advisory : kernel (MDKSA-2005:110)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandrake Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Multiple vulnerabilities in the Linux kernel have been discovered and\nfixed in this update. The following CVE names have been fixed in the\nLE2005 kernel :\n\nColin Percival discovered a vulnerability in Intel's Hyper-Threading\ntechnology could allow a local user to use a malicious thread to\ncreate covert channels, monitor the execution of other threads, and\nobtain sensitive information such as cryptographic keys via a timing\nattack on memory cache misses. This has been corrected by disabling HT\nsupport in all kernels (CVE-2005-0109).\n\nAn information leak in the ext2 filesystem code in kernels prior to\n2.6.11.6 was found where when a new directory is created, the ext2\nblock written to disk is not initialized (CVE-2005-0400).\n\nA flaw when freeing a pointer in load_elf_library was found in kernels\nprior to 2.6.11.6 that could be abused by a local user to potentially\ncrash the machine causing a Denial of Service (CVE-2005-0749).\n\nA problem with the Bluetooth kernel stack in kernels 2.4.6 through\n2.4.30-rc1 and 2.6 through 2.6.11.5 could be used by a local attacker\nto gain root access or crash the machine (CVE-2005-0750).\n\nPaul Starzetz found an integer overflow in the ELF binary format\nloader's code dump function in kernels prior to and including\n2.4.31-pre1 and 2.6.12-rc4. By creating and executing a specially\ncrafted ELF executable, a local attacker could exploit this to execute\narbitrary code with root and kernel privileges (CVE-2005-1263).\n\nThe drivers for raw devices used the wrong function to pass arguments\nto the underlying block device in 2.6.x kernels. This made the kernel\naddress space accessible to user-space applications allowing any local\nuser with at least read access to a device in /dev/raw/* (usually only\nroot) to execute arbitrary code with kernel privileges\n(CVE-2005-1264).\n\nThe it87 and via686a hardware monitor drivers in kernels prior to\n2.6.11.8 and 2.6.12 prior to 2.6.12-rc2 created a sysfs file named\n'alarms' with write permissions although they are not designed to be\nwritable. This allowed a local user to crash the kernel by attempting\nto write to these files (CVE-2005-1369).\n\nIn addition to the above-noted CVE-2005-0109, CVE-2005-0400,\nCVE-2005-0749, CVE-2005-0750, and CVE-2005-1369 fixes, the following\nCVE names have been fixed in the 10.1 kernel :\n\nThe POSIX Capability Linux Security Module (LSM) for 2.6 kernels up to\nand including 2.6.8.1 did not properly handle the credentials of a\nprocess that is launched before the module is loaded, which could be\nused by local attackers to gain elevated privileges (CVE-2004-1337).\n\nA flaw in the Linux PPP driver in kernel 2.6.8.1 was found where on\nsystems allowing remote users to connect to a server via PPP, a remote\nclient could cause a crash, resulting in a Denial of Service\n(CVE-2005-0384).\n\nGeorge Guninski discovered a buffer overflow in the ATM driver in\nkernels 2.6.10 and 2.6.11 before 2.6.11-rc4 where the atm_get_addr()\nfunction does not validate its arguments sufficiently which could\nallow a local attacker to overwrite large portions of kernel memory by\nsupplying a negative length argument. This could potentially lead to\nthe execution of arbitrary code (CVE-2005-0531).\n\nThe reiserfs_copy_from_user_to_file_region function in reiserfs/file.c\nbefore kernel 2.6.11, when running on 64-bit architectures, could\nallow local users to trigger a buffer overflow as a result of casting\ndiscrepancies between size_t and int data types. This could allow an\nattacker to overwrite kernel memory, crash the machine, or potentially\nobtain root access (CVE-2005-0532).\n\nA race condition in the Radeon DRI driver in kernel 2.6.8.1 allows a\nlocal user with DRI privileges to execute arbitrary code as root\n(CVE-2005-0767).\n\nAccess was not restricted to the N_MOUSE discipline for a TTY in\nkernels prior to 2.6.11. This could allow local attackers to obtain\nelevated privileges by injecting mouse or keyboard events into other\nuser's sessions (CVE-2005-0839).\n\nSome futex functions in futex.c in 2.6 kernels performed get_user\ncalls while holding the mmap_sem semaphore, which could allow a local\nattacker to cause a deadlock condition in do_page_fault by triggering\nget_user faults while another thread is executing mmap or other\nfunctions (CVE-2005-0937).\n\nIn addition to the above-noted CVE-2004-1337, CVE-2005-0109,\nCVE-2005-0384, CVE-2005-0400, CVE-2005-0531, CVE-2005-0532,\nCVE-2005-0749, CVE-2005-0750, CVE-2005-0767, CVE-2005-0839,\nCVE-2005-0937, CVE-2005-1263, CVE-2005-1264, and CVE-2005-1369 fixes,\nthe following CVE names have been fixed in the 10.0/ Corporate 3.0\nkernels :\n\nA race condition in the setsid function in kernels before 2.6.8.1\ncould allow a local attacker to cause a Denial of Service and possibly\naccess portions of kernel memory related to TTY changes, locking, and\nsemaphores (CVE-2005-0178).\n\nWhen forwarding fragmented packets in kernel 2.6.8.1, a hardware\nassisted checksum could only be used once which could lead to a Denial\nof Service attack or crash by remote users (CVE-2005-0209).\n\nA signedness error in the copy_from_read_buf function in n_tty.c\nbefore kernel 2.6.11 allows local users to read kernel memory via a\nnegative argument (CVE-2005-0530).\n\nA vulnerability in the fib_seq_start() function allowed a local user\nto crash the system by readiung /proc/net/route in a certain way,\ncausing a Denial of Service (CVE-2005-1041).\n\nA vulnerability in the Direct Rendering Manager (DRM) driver in the\n2.6 kernel does not properly check the DMA lock, which could allow\nremote attackers or local users to cause a Denial of Service (X Server\ncrash) and possibly modify the video output (CVE-2004-1056).\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_cwe_id(20);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-2.6.11.12mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-2.6.3.27mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-2.6.8.1.25mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-enterprise-2.6.3.27mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-enterprise-2.6.8.1.25mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i586-up-1GB-2.6.11.12mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i586-up-1GB-2.6.8.1.25mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i686-up-4GB-2.6.11.12mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i686-up-4GB-2.6.3.27mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-i686-up-64GB-2.6.8.1.25mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-p3-smp-64GB-2.6.3.27mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-secure-2.6.3.27mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-secure-2.6.8.1.25mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-smp-2.6.11.12mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-smp-2.6.3.27mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-smp-2.6.8.1.25mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-source\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-source-2.6\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-source-stripped\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-source-stripped-2.6\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:kernel-xbox-2.6.11.12mdk\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandrakesoft:mandrake_linux:10.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandrakesoft:mandrake_linux:10.1\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:mandrakesoft:mandrake_linux:le2005\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/06/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/07/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2005-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-2.6.3.27mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", cpu:\"i386\", reference:\"kernel-enterprise-2.6.3.27mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", cpu:\"i386\", reference:\"kernel-i686-up-4GB-2.6.3.27mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", cpu:\"i386\", reference:\"kernel-p3-smp-64GB-2.6.3.27mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-secure-2.6.3.27mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-smp-2.6.3.27mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-source-2.6.3-27mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.0\", reference:\"kernel-source-stripped-2.6.3-27mdk\", yank:\"mdk\")) flag++;\n\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-2.6.8.1.25mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", cpu:\"i386\", reference:\"kernel-enterprise-2.6.8.1.25mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", cpu:\"i386\", reference:\"kernel-i586-up-1GB-2.6.8.1.25mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", cpu:\"i386\", reference:\"kernel-i686-up-64GB-2.6.8.1.25mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-secure-2.6.8.1.25mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-smp-2.6.8.1.25mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-source-2.6-2.6.8.1-25mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.1\", reference:\"kernel-source-stripped-2.6-2.6.8.1-25mdk\", yank:\"mdk\")) flag++;\n\nif (rpm_check(release:\"MDK10.2\", reference:\"kernel-2.6.11.12mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.2\", cpu:\"i386\", reference:\"kernel-i586-up-1GB-2.6.11.12mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.2\", cpu:\"i386\", reference:\"kernel-i686-up-4GB-2.6.11.12mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.2\", reference:\"kernel-smp-2.6.11.12mdk-1-1mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.2\", reference:\"kernel-source-2.6-2.6.11-12mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.2\", reference:\"kernel-source-stripped-2.6-2.6.11-12mdk\", yank:\"mdk\")) flag++;\nif (rpm_check(release:\"MDK10.2\", cpu:\"i386\", reference:\"kernel-xbox-2.6.11.12mdk-1-1mdk\", yank:\"mdk\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}], "ubuntu": [{"lastseen": "2020-07-09T17:35:37", "bulletinFamily": "unix", "cvelist": ["CVE-2005-0529", "CVE-2005-0736", "CVE-2005-0767", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0531", "CVE-2005-0210", "CVE-2005-0532"], "description": "A remote Denial of Service vulnerability was discovered in the \nNetfilter IP packet handler. This allowed a remote attacker to crash \nthe machine by sending specially crafted IP packet fragments. \n(CAN-2005-0209)\n\nThe Netfilter code also contained a memory leak. Certain locally \ngenerated packet fragments are reassembled twice, which caused a \ndouble allocation of a data structure. This could be locally exploited \nto crash the machine due to kernel memory exhaustion. (CAN-2005-0210)\n\nBen Martel and Stephen Blackheath found a remote Denial of Service \nvulnerability in the PPP driver. This allowed a malicious pppd client \nto crash the server machine. (CAN-2005-0384)\n\nGeorgi Guninski discovered a buffer overflow in the ATM driver. The \natm_get_addr() function does not validate its arguments sufficiently, \nwhich could allow a local attacker to overwrite large portions of \nkernel memory by supplying a negative length argument. This could \neventually lead to arbitrary code execution. (CAN-2005-0531)\n\nGeorgi Guninski also discovered three other integer comparison \nproblems in the TTY layer, in the /proc interface and the ReiserFS \ndriver. However, the previous Ubuntu security update (kernel version \n2.6.8.1-16.11) already contained a patch which checks the arguments to \nthese functions at a higher level and thus prevents these flaws from \nbeing exploited. (CAN-2005-0529, CAN-2005-0530, CAN-2005-0532)\n\nGeorgi Guninski discovered an integer overflow in the sys_epoll_wait() \nfunction which allowed local users to overwrite the first few kB of \nphysical memory. However, very few applications actually use this \nspace (dosemu is a notable exception), but potentially this could lead \nto privilege escalation. (CAN-2005-0736)\n\nEric Anholt discovered a race condition in the Radeon DRI driver. In \nsome cases this allowed a local user with DRI privileges on a Radeon \ncard to execute arbitrary code with root privileges.\n\nFinally this update fixes a regression in the NFS server driver \nwhich was introduced in the previous security update (kernel version \n2.6.8.1-16.11). We apologize for the inconvenience. \n(<https://bugzilla.ubuntulinux.org/show_bug.cgi?id=6749>)", "edition": 15, "modified": "2005-03-15T00:00:00", "published": "2005-03-15T00:00:00", "id": "USN-95-1", "href": "https://ubuntu.com/security/notices/USN-95-1", "title": "Linux kernel vulnerabilities", "type": "ubuntu", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}], "openvas": [{"lastseen": "2018-04-06T11:39:58", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0135", "CVE-2005-0529", "CVE-2005-0504", "CVE-2005-0136", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0210", "CVE-2005-0532", "CVE-2005-0449", "CVE-2004-0814"], "description": "The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n um-host-kernel\n um-host-install-initrd\n kernel-bigsmp\n kernel-default\n kernel-um\n kernel-syms\n kernel-source\n kernel-smp\n kernel-debug\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5011171 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/", "modified": "2018-04-06T00:00:00", "published": "2009-10-10T00:00:00", "id": "OPENVAS:136141256231065101", "href": "http://plugins.openvas.org/nasl.php?oid=136141256231065101", "type": "openvas", "title": "SLES9: Security update for Linux kernel", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: sles9p5011171.nasl 9350 2018-04-06 07:03:33Z cfischer $\n# Description: Security update for Linux kernel\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n um-host-kernel\n um-host-install-initrd\n kernel-bigsmp\n kernel-default\n kernel-um\n kernel-syms\n kernel-source\n kernel-smp\n kernel-debug\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5011171 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/\";\n\ntag_solution = \"Please install the updates provided by SuSE.\";\n \nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.65101\");\n script_version(\"$Revision: 9350 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:03:33 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-10-10 16:11:46 +0200 (Sat, 10 Oct 2009)\");\n script_cve_id(\"CVE-2005-0449\", \"CVE-2005-0209\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0136\", \"CVE-2005-0532\", \"CVE-2005-0135\", \"CVE-2005-0384\", \"CVE-2005-0210\", \"CVE-2005-0504\", \"CVE-2004-0814\");\n script_tag(name:\"cvss_base\", value:\"7.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_name(\"SLES9: Security update for Linux kernel\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse_sles\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"um-host-kernel\", rpm:\"um-host-kernel~2.6.5~7.151\", rls:\"SLES9.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-07-26T08:56:07", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-0135", "CVE-2005-0529", "CVE-2005-0504", "CVE-2005-0136", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0210", "CVE-2005-0532", "CVE-2005-0449", "CVE-2004-0814"], "description": "The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n um-host-kernel\n um-host-install-initrd\n kernel-bigsmp\n kernel-default\n kernel-um\n kernel-syms\n kernel-source\n kernel-smp\n kernel-debug\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5011171 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/", "modified": "2017-07-11T00:00:00", "published": "2009-10-10T00:00:00", "id": "OPENVAS:65101", "href": "http://plugins.openvas.org/nasl.php?oid=65101", "type": "openvas", "title": "SLES9: Security update for Linux kernel", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: sles9p5011171.nasl 6666 2017-07-11 13:13:36Z cfischer $\n# Description: Security update for Linux kernel\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n um-host-kernel\n um-host-install-initrd\n kernel-bigsmp\n kernel-default\n kernel-um\n kernel-syms\n kernel-source\n kernel-smp\n kernel-debug\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5011171 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/\";\n\ntag_solution = \"Please install the updates provided by SuSE.\";\n \nif(description)\n{\n script_id(65101);\n script_version(\"$Revision: 6666 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-11 15:13:36 +0200 (Tue, 11 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-10-10 16:11:46 +0200 (Sat, 10 Oct 2009)\");\n script_cve_id(\"CVE-2005-0449\", \"CVE-2005-0209\", \"CVE-2005-0529\", \"CVE-2005-0530\", \"CVE-2005-0136\", \"CVE-2005-0532\", \"CVE-2005-0135\", \"CVE-2005-0384\", \"CVE-2005-0210\", \"CVE-2005-0504\", \"CVE-2004-0814\");\n script_tag(name:\"cvss_base\", value:\"7.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_name(\"SLES9: Security update for Linux kernel\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse_sles\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"um-host-kernel\", rpm:\"um-host-kernel~2.6.5~7.151\", rls:\"SLES9.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "suse": [{"lastseen": "2016-09-04T11:24:48", "bulletinFamily": "unix", "cvelist": ["CVE-2005-0003", "CVE-2005-2801", "CVE-2004-1333", "CVE-2005-0529", "CVE-2005-0504", "CVE-2005-0736", "CVE-2005-0384", "CVE-2005-0530", "CVE-2005-0209", "CVE-2005-0210", "CVE-2005-0532", "CVE-2005-0867", "CVE-2005-0449", "CVE-2004-0814"], "description": "The Linux kernel is the core component of the Linux system.\n#### Solution\nNone. Please install the updated packages.", "edition": 1, "modified": "2005-03-24T16:30:19", "published": "2005-03-24T16:30:19", "id": "SUSE-SA:2005:018", "href": "http://lists.opensuse.org/opensuse-security-announce/2005-03/msg00020.html", "type": "suse", "title": "remote denial of service in kernel", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}]}