{"title": "GNU libc (glibc) SUID Binary Debugging Information Disclosure", "published": "2004-08-16T05:24:28", "references": [], "type": "osvdb", "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "cvelist": ["CVE-2004-1453"], "viewCount": 1, "affectedSoftware": [{"version": "2.1", "name": "glibc", "operator": "eq"}, {"version": "2.1.3 -10", "name": "glibc", "operator": "eq"}, {"version": "2.3.3", "name": "glibc", "operator": "eq"}, {"version": "2.3.2", "name": "glibc", "operator": "eq"}, {"version": "2.0.4", "name": "glibc", "operator": "eq"}, {"version": "2.0.2", "name": "glibc", "operator": "eq"}, {"version": "2.2.1", "name": "glibc", "operator": "eq"}, {"version": "2.0", "name": "glibc", "operator": "eq"}, {"version": "2.0.3", "name": "glibc", "operator": "eq"}, {"version": "2.2.3", "name": "glibc", "operator": "eq"}, {"version": "2.3", "name": "glibc", "operator": "eq"}, {"version": "2.2.4", "name": "glibc", "operator": "eq"}, {"version": "2.0.6", "name": "glibc", "operator": "eq"}, {"version": "2.3.4", "name": "glibc", "operator": "eq"}, {"version": "2.1.3", "name": "glibc", "operator": "eq"}, {"version": "2.0.1", "name": "glibc", "operator": "eq"}, {"version": "2.0.5", "name": "glibc", "operator": "eq"}, {"version": "2.1.9", "name": "glibc", "operator": "eq"}, {"version": "2.3.1", "name": "glibc", "operator": "eq"}, {"version": "2.1.1", "name": "glibc", "operator": "eq"}, {"version": "2.2", "name": "glibc", "operator": "eq"}, {"version": "2.1.1 -6", "name": "glibc", "operator": "eq"}, {"version": "2.2.2", "name": "glibc", "operator": "eq"}, {"version": "2.2.5", "name": "glibc", "operator": "eq"}, {"version": "2.1.2", "name": "glibc", "operator": "eq"}], "hash": "a7d12c9d6604529a68124c9736c34ba1895e6efdd09e3efb41db5adff35049aa", "id": "OSVDB:9010", "modified": "2004-08-16T05:24:28", "history": [], "href": "https://vulners.com/osvdb/OSVDB:9010", "hashmap": [{"hash": "266a56888117e7ce724c3d31c6c5bcc5", "key": "affectedSoftware"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "b220df085e94543a59ded67f2224e0fa", "key": "cvelist"}, {"hash": "635d7f080910dc81e99c0ca9b0d4203f", "key": "cvss"}, {"hash": "d81894cde30899925c84bc13928b350f", "key": "description"}, {"hash": "18f34e61d641be5ec1f3d89ef0103c4b", "key": "href"}, {"hash": "ff437198489376b666bccd5024b8c29a", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "ff437198489376b666bccd5024b8c29a", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "b686368677f61580c339971e502be3a5", "key": "reporter"}, {"hash": "aca2a18077c8a26db2311f9ea7756bd0", "key": "title"}, {"hash": "1327ac71f7914948578f08c54f772b10", "key": "type"}], "objectVersion": "1.2", "edition": 1, "description": "## Vulnerability Description\nglibc contains a flaw that may lead to an unauthorized information disclosure. LD_DEBUG is allowed on setuid binaries which as a result may allow a local attacker to debug a setuid binary and gain sensitive information about the system, resulting in a loss of confidentiality.\n## Solution Description\nUpgrade to version 2.3.4.20040619-r1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nglibc contains a flaw that may lead to an unauthorized information disclosure. LD_DEBUG is allowed on setuid binaries which as a result may allow a local attacker to debug a setuid binary and gain sensitive information about the system, resulting in a loss of confidentiality.\n## References:\nVendor URL: http://www.gnu.org/software/libc/libc.html\n[Vendor Specific Advisory URL](http://support.avaya.com/elmodocs2/security/ASA-2005-155.pdf)\n[Vendor Specific Advisory URL](http://bugs.gentoo.org/show_bug.cgi?id=59526)\nSecurity Tracker: 1010975\n[Secunia Advisory ID:12306](https://secuniaresearch.flexerasoftware.com/advisories/12306/)\n[Secunia Advisory ID:15186](https://secuniaresearch.flexerasoftware.com/advisories/15186/)\n[Secunia Advisory ID:15415](https://secuniaresearch.flexerasoftware.com/advisories/15415/)\nOther Advisory URL: http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml\nOther Advisory URL: http://rhn.redhat.com/errata/RHSA-2005-261.html\nOther Advisory URL: http://rhn.redhat.com/errata/RHSA-2005-256.html\nISS X-Force ID: 17006\n[CVE-2004-1453](https://vulners.com/cve/CVE-2004-1453)\nBugtraq ID: 10963\n", "bulletinFamily": "software", "reporter": "Silvio Cesare(silvio@qualys.com)", "cvss": {"vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/", "score": 2.1}, "lastseen": "2017-04-28T13:20:04"}

{"cve": [{"lastseen": "2017-10-11T11:06:01", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/17006", "http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml", "http://bugs.gentoo.org/show_bug.cgi?id=59526", "http://www.securityfocus.com/bid/10963", "http://www.redhat.com/support/errata/RHSA-2005-256.html", "http://www.redhat.com/support/errata/RHSA-2005-261.html"], "description": "GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.", "edition": 3, "reporter": "NVD", "published": "2004-12-31T00:00:00", "title": "CVE-2004-1453", "type": "cve", "enchantments": {"score": {"modified": "2017-10-11T11:06:01", "vector": "NONE", "value": 2.1}}, "assessment": {"system": "http://oval.mitre.org/XMLSchema/oval-definitions-5", "name": "oval:org.mitre.oval:def:10762", "href": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762"}, "bulletinFamily": "NVD", "cvelist": ["CVE-2004-1453"], "scanner": [{"system": "http://oval.mitre.org/XMLSchema/oval-definitions-5", "name": "oval:org.mitre.oval:def:10762", "href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10762"}], "modified": "2017-10-10T21:29:45", "cpe": ["cpe:/a:gnu:glibc:2.1.3", "cpe:/a:gnu:glibc:2.1.1", "cpe:/a:gnu:glibc:2.2", "cpe:/a:gnu:glibc:2.0.3", "cpe:/a:gnu:glibc:2.3.3", "cpe:/a:gnu:glibc:2.1.2", "cpe:/a:gnu:glibc:2.1.1.6", "cpe:/a:gnu:glibc:2.0", "cpe:/a:gnu:glibc:2.3", "cpe:/a:gnu:glibc:2.2.2", "cpe:/a:gnu:glibc:2.2.5", "cpe:/a:gnu:glibc:2.2.3", "cpe:/a:gnu:glibc:2.0.2", "cpe:/a:gnu:glibc:2.2.4", "cpe:/a:gnu:glibc:2.0.4", "cpe:/a:gnu:glibc:2.1", "cpe:/a:gnu:glibc:2.0.6", "cpe:/a:gnu:glibc:2.0.5", "cpe:/a:gnu:glibc:2.0.1", "cpe:/a:gnu:glibc:2.1.3.10", "cpe:/a:gnu:glibc:2.3.2", "cpe:/a:gnu:glibc:2.2.1", "cpe:/a:gnu:glibc:2.3.4", "cpe:/a:gnu:glibc:2.1.9", "cpe:/a:gnu:glibc:2.3.1"], "id": "CVE-2004-1453", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2004-1453", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:23", "references": ["http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1453", "https://bugs.gentoo.org/show_bug.cgi?id=59526"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.2-r10", "arch": "s390", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.2-r10", "arch": "arm", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.4.20040605", "arch": "ppc64", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.2-r10", "arch": "ia64", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.2-r10", "arch": "alpha", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.2-r10", "arch": "sparc", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.2-r10", "arch": "hppa", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.3.20040420", "arch": "ppc", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.3.20040420", "arch": "mips", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.3.20040420", "arch": "x86", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}, {"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.3.4.20040619", "arch": "amd64", "packageFilename": "UNKNOWN", "packageName": "sys-libs/glibc", "operator": "le"}], "edition": 1, "description": "### Background\n\nThe GNU C library defines various Unix-like \"system calls\" and other basic facilities needed for a standard POSIX-like application to operate. \n\n### Description\n\nSilvio Cesare discovered a potential information leak in glibc. It allows LD_DEBUG on SUID binaries where it should not be allowed. This has various security implications, which may be used to gain confidentional information. \n\n### Impact\n\nAn attacker can gain the list of symbols a SUID application uses and their locations and can then use a trojaned library taking precendence over those symbols to gain information or perform further exploitation. \n\n### Workaround\n\nThere is no known workaround at this time. All users are encouraged to upgrade to the latest available version of glibc. \n\n### Resolution\n\nAll glibc users should upgrade to the latest version: \n \n \n # emerge sync\n \n # emerge -pv your_version\n # emerge your_version", "reporter": "Gentoo Foundation", "published": "2004-08-16T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "gentoo", "title": "glibc: Information leak with LD_DEBUG", "bulletinFamily": "unix", "cvelist": ["CVE-2004-1453"], "modified": "2006-05-28T00:00:00", "id": "GLSA-200408-16", "href": "https://security.gentoo.org/glsa/200408-16", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}], "centos": [{"lastseen": "2017-10-12T14:44:51", "references": ["http://iki.fi/upi/", "https://rhn.redhat.com/errata/RHSA-2005-256.html", "http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B"], "affectedPackage": [{"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i686", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.i686.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i686", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.i686.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i686", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.i686.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i686", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.i686.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "any", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.src.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "any", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.src.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i686", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.i686.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i686", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.i686.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "any", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.src.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "any", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.src.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-debug", "packageFilename": "glibc-debug-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "ia64", "packageName": "nptl-devel", "packageFilename": "nptl-devel-2.3.2-95.33.ia64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "nscd", "packageFilename": "nscd-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc-utils", "packageFilename": "glibc-utils-2.3.2-95.33.x86_64.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390x", "packageName": "glibc-profile", "packageFilename": "glibc-profile-2.3.2-95.33.s390x.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "s390", "packageName": "glibc-devel", "packageFilename": "glibc-devel-2.3.2-95.33.s390.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-headers", "packageFilename": "glibc-headers-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "arch": "i386", "packageName": "glibc-common", "packageFilename": "glibc-common-2.3.2-95.33.i386.rpm", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "3", "packageVersion": "2.3.2-95.33", "arch": "x86_64", "packageName": "glibc", "packageFilename": "glibc-2.3.2-95.33.x86_64.rpm", "operator": "lt"}], "description": "**CentOS Errata and Security Advisory** CESA-2005:256\n\n\nThe GNU libc packages (known as glibc) contain the standard C libraries\nused by applications.\n\nIt was discovered that the use of LD_DEBUG, LD_SHOW_AUXV, and\nLD_DYNAMIC_WEAK were not restricted for a setuid program. A local user\ncould utilize this flaw to gain information, such as the list of symbols\nused by the program. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-1453 to this issue.\n\nThis erratum addresses the following bugs in the GNU C Library:\n\n- fix stack alignment in IA-32 clone\n- fix double free in globfree\n- fix fnmatch to avoid jumping based on unitialized memory read\n- fix fseekpos after ungetc\n- fix TZ env var handling if the variable ends with + or -\n- avoid depending on values read from unitialized memory in strtold\n on certain architectures\n- fix mapping alignment computation in dl-load\n- fix i486+ strncat inline assembly\n- make gethostid/sethostid work on bi-arch platforms\n- fix ppc64 getcontext/swapcontext\n- fix pthread_exit if called after pthread_create, but before the created\n thread actually started\n- fix return values for tgamma (+-0)\n- fix handling of very long lines in /etc/hosts\n- avoid page aliasing of thread stacks on AMD64\n- avoid busy loop in malloc if concurrent with fork\n- allow putenv and setenv in shared library constructors\n- fix restoring of CCR in swapcontext and getcontext on ppc64\n- avoid using sigaction (SIGPIPE, ...) in syslog implementation\n\nAll users of glibc should upgrade to these updated packages, which resolve\nthese issues.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2005-May/011675.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-May/011681.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-May/011720.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-May/011721.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-May/011729.html\nhttp://lists.centos.org/pipermail/centos-announce/2005-May/011730.html\n\n**Affected packages:**\nglibc\nglibc-common\nglibc-debug\nglibc-devel\nglibc-headers\nglibc-profile\nglibc-utils\nnptl-devel\nnscd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2005-256.html", "edition": 2, "reporter": "CentOS Project", "published": "2005-05-18T18:01:42", "title": "glibc, nptl, nscd security update", "type": "centos", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "bulletinFamily": "unix", "cvelist": ["CVE-2004-1453"], "modified": "2005-05-20T15:29:58", "href": "http://lists.centos.org/pipermail/centos-announce/2005-May/011675.html", "id": "CESA-2005:256", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2018-01-24T23:01:25", "references": ["https://rhn.redhat.com/errata/rh21as-errata.html", "http://www.ict.swin.edu.au/staff/jnewbigin"], "affectedPackage": [{"OS": "CentOS", "OSVersion": "2", "packageVersion": "2.2.4-32.20", "packageFilename": "glibc-common-2.2.4-32.20.i386.rpm", "packageName": "glibc-common", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "2", "packageVersion": "2.2.4-32.20", "packageFilename": "glibc-profile-2.2.4-32.20.i386.rpm", "packageName": "glibc-profile", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "2", "packageVersion": "2.2.4-32.20", "packageFilename": "nscd-2.2.4-32.20.i386.rpm", "packageName": "nscd", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "2", "packageVersion": "2.2.4-32.20", "packageFilename": "glibc-devel-2.2.4-32.20.i386.rpm", "packageName": "glibc-devel", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "2", "packageVersion": "2.2.4-32.20", "packageFilename": "glibc-2.2.4-32.20.i386.rpm", "packageName": "glibc", "arch": "i386", "operator": "lt"}, {"OS": "CentOS", "OSVersion": "2", "packageVersion": "2.2.4-32.20", "packageFilename": "glibc-2.2.4-32.20.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}], "description": "**CentOS Errata and Security Advisory** CESA-2005:261-01\n\n\nThe GNU libc packages (known as glibc) contain the standard C libraries\nused by applications.\n\nFlaws in the catchsegv and glibcbug scripts were discovered. A local user\ncould utilize these flaws to overwrite files via a symlink attack on\ntemporary files. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0968 and CAN-2004-1382 to\nthese issues.\n\nIt was discovered that the use of LD_DEBUG and LD_SHOW_AUXV were not\nrestricted for a setuid program. A local user could utilize this flaw to\ngain information, such as the list of symbols used by the program. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2004-1453 to this issue.\n\nThis erratum also addresses the following bugs in the GNU C Library:\n- Now avoids calling sigaction (SIGPIPE, ...) in syslog implementation\n- Fixed poll on Itanium\n- Now allows setenv/putenv in shared library constructors\n\nUsers of glibc are advised to upgrade to these erratum packages that remove\nthe unecessary glibcbug script and contain backported patches to correct\nthese other issues.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2005-April/011620.html\n\n**Affected packages:**\nglibc\nglibc-common\nglibc-devel\nglibc-profile\nnscd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/rh21as-errata.html", "edition": 3, "reporter": "CentOS Project", "published": "2005-04-29T04:46:27", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "title": "glibc, nscd security update", "type": "centos", "bulletinFamily": "unix", "cvelist": ["CVE-2004-1382", "CVE-2004-1453", "CVE-2004-0968"], "modified": "2005-04-29T04:46:27", "href": "http://lists.centos.org/pipermail/centos-announce/2005-April/011620.html", "id": "CESA-2005:261-01", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}], "nessus": [{"lastseen": "2018-09-02T00:10:29", "references": ["http://rhn.redhat.com/errata/RHSA-2005-256.html", "https://www.redhat.com/security/data/cve/CVE-2004-1453.html"], "pluginID": "18312", "description": "Updated glibc packages that address several bugs are now available.\n\nThis update has been rated as having low security impact by the Red Hat Security Response Team.\n\nThe GNU libc packages (known as glibc) contain the standard C libraries used by applications.\n\nIt was discovered that the use of LD_DEBUG, LD_SHOW_AUXV, and LD_DYNAMIC_WEAK were not restricted for a setuid program. A local user could utilize this flaw to gain information, such as the list of symbols used by the program. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-1453 to this issue.\n\nThis erratum addresses the following bugs in the GNU C Library :\n\n - fix stack alignment in IA-32 clone - fix double free in globfree - fix fnmatch to avoid jumping based on uninitialized memory read - fix fseekpos after ungetc - fix TZ env var handling if the variable ends with + or -\n - avoid depending on values read from uninitialized memory in strtold on certain architectures - fix mapping alignment computation in dl-load - fix i486+ strncat inline assembly - make gethostid/sethostid work on bi-arch platforms - fix ppc64 getcontext/swapcontext - fix pthread_exit if called after pthread_create, but before the created thread actually started - fix return values for tgamma (+-0) - fix handling of very long lines in /etc/hosts - avoid page aliasing of thread stacks on AMD64 - avoid busy loop in malloc if concurrent with fork - allow putenv and setenv in shared library constructors - fix restoring of CCR in swapcontext and getcontext on ppc64 - avoid using sigaction (SIGPIPE, ...) in syslog implementation\n\nAll users of glibc should upgrade to these updated packages, which resolve these issues.", "edition": 6, "reporter": "Tenable", "published": "2005-05-19T00:00:00", "title": "RHEL 3 : glibc (RHSA-2005:256)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2004-1453"], "modified": "2018-08-13T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:3", "p-cpe:/a:redhat:enterprise_linux:glibc-utils", "p-cpe:/a:redhat:enterprise_linux:nptl-devel", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "p-cpe:/a:redhat:enterprise_linux:glibc-profile", "p-cpe:/a:redhat:enterprise_linux:glibc-headers"], "id": "REDHAT-RHSA-2005-256.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=18312", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:256. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(18312);\n script_version (\"1.21\");\n script_cvs_date(\"Date: 2018/08/13 14:32:37\");\n\n script_cve_id(\"CVE-2004-1453\");\n script_xref(name:\"RHSA\", value:\"2005:256\");\n\n script_name(english:\"RHEL 3 : glibc (RHSA-2005:256)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that address several bugs are now available.\n\nThis update has been rated as having low security impact by the Red\nHat Security Response Team.\n\nThe GNU libc packages (known as glibc) contain the standard C\nlibraries used by applications.\n\nIt was discovered that the use of LD_DEBUG, LD_SHOW_AUXV, and\nLD_DYNAMIC_WEAK were not restricted for a setuid program. A local user\ncould utilize this flaw to gain information, such as the list of\nsymbols used by the program. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CVE-2004-1453 to this\nissue.\n\nThis erratum addresses the following bugs in the GNU C Library :\n\n - fix stack alignment in IA-32 clone - fix double free in\n globfree - fix fnmatch to avoid jumping based on\n uninitialized memory read - fix fseekpos after ungetc -\n fix TZ env var handling if the variable ends with + or -\n - avoid depending on values read from uninitialized\n memory in strtold on certain architectures - fix mapping\n alignment computation in dl-load - fix i486+ strncat\n inline assembly - make gethostid/sethostid work on\n bi-arch platforms - fix ppc64 getcontext/swapcontext -\n fix pthread_exit if called after pthread_create, but\n before the created thread actually started - fix return\n values for tgamma (+-0) - fix handling of very long\n lines in /etc/hosts - avoid page aliasing of thread\n stacks on AMD64 - avoid busy loop in malloc if\n concurrent with fork - allow putenv and setenv in shared\n library constructors - fix restoring of CCR in\n swapcontext and getcontext on ppc64 - avoid using\n sigaction (SIGPIPE, ...) in syslog implementation\n\nAll users of glibc should upgrade to these updated packages, which\nresolve these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2004-1453.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2005-256.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-profile\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nptl-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/05/18\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/05/19\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2004/08/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2005-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^3([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 3.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2005:256\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL3\", reference:\"glibc-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"glibc-common-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"glibc-devel-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"glibc-headers-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"glibc-profile-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"glibc-utils-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"nptl-devel-2.3.2-95.33\")) flag++;\n if (rpm_check(release:\"RHEL3\", reference:\"nscd-2.3.2-95.33\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-headers / glibc-profile / etc\");\n }\n}\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2018-09-01T23:55:51", "references": ["http://lists.centos.org/pipermail/centos-announce/2005-May/011729.html", "http://lists.centos.org/pipermail/centos-announce/2005-May/011721.html", "http://lists.centos.org/pipermail/centos-announce/2005-May/011720.html", "http://lists.centos.org/pipermail/centos-announce/2005-May/011730.html", "http://lists.centos.org/pipermail/centos-announce/2005-May/011675.html"], "pluginID": "21800", "description": "Updated glibc packages that address several bugs are now available.\n\nThis update has been rated as having low security impact by the Red Hat Security Response Team.\n\nThe GNU libc packages (known as glibc) contain the standard C libraries used by applications.\n\nIt was discovered that the use of LD_DEBUG, LD_SHOW_AUXV, and LD_DYNAMIC_WEAK were not restricted for a setuid program. A local user could utilize this flaw to gain information, such as the list of symbols used by the program. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-1453 to this issue.\n\nThis erratum addresses the following bugs in the GNU C Library :\n\n - fix stack alignment in IA-32 clone - fix double free in globfree - fix fnmatch to avoid jumping based on uninitialized memory read - fix fseekpos after ungetc - fix TZ env var handling if the variable ends with + or -\n - avoid depending on values read from uninitialized memory in strtold on certain architectures - fix mapping alignment computation in dl-load - fix i486+ strncat inline assembly - make gethostid/sethostid work on bi-arch platforms - fix ppc64 getcontext/swapcontext - fix pthread_exit if called after pthread_create, but before the created thread actually started - fix return values for tgamma (+-0) - fix handling of very long lines in /etc/hosts - avoid page aliasing of thread stacks on AMD64 - avoid busy loop in malloc if concurrent with fork - allow putenv and setenv in shared library constructors - fix restoring of CCR in swapcontext and getcontext on ppc64 - avoid using sigaction (SIGPIPE, ...) in syslog implementation\n\nAll users of glibc should upgrade to these updated packages, which resolve these issues.", "edition": 5, "reporter": "Tenable", "published": "2006-07-03T00:00:00", "title": "CentOS 3 : glibc (CESA-2005:256)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2004-1453"], "modified": "2018-08-09T00:00:00", "cpe": ["p-cpe:/a:centos:centos:glibc-common", "p-cpe:/a:centos:centos:nscd", "p-cpe:/a:centos:centos:glibc-utils", "p-cpe:/a:centos:centos:glibc-devel", "p-cpe:/a:centos:centos:glibc-profile", "p-cpe:/a:centos:centos:glibc-headers", "p-cpe:/a:centos:centos:glibc", "p-cpe:/a:centos:centos:nptl-devel", "cpe:/o:centos:centos:3", "p-cpe:/a:centos:centos:glibc-debug"], "id": "CENTOS_RHSA-2005-256.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=21800", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:256 and \n# CentOS Errata and Security Advisory 2005:256 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(21800);\n script_version(\"1.16\");\n script_cvs_date(\"Date: 2018/08/09 17:06:35\");\n\n script_cve_id(\"CVE-2004-1453\");\n script_xref(name:\"RHSA\", value:\"2005:256\");\n\n script_name(english:\"CentOS 3 : glibc (CESA-2005:256)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that address several bugs are now available.\n\nThis update has been rated as having low security impact by the Red\nHat Security Response Team.\n\nThe GNU libc packages (known as glibc) contain the standard C\nlibraries used by applications.\n\nIt was discovered that the use of LD_DEBUG, LD_SHOW_AUXV, and\nLD_DYNAMIC_WEAK were not restricted for a setuid program. A local user\ncould utilize this flaw to gain information, such as the list of\nsymbols used by the program. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CVE-2004-1453 to this\nissue.\n\nThis erratum addresses the following bugs in the GNU C Library :\n\n - fix stack alignment in IA-32 clone - fix double free in\n globfree - fix fnmatch to avoid jumping based on\n uninitialized memory read - fix fseekpos after ungetc -\n fix TZ env var handling if the variable ends with + or -\n - avoid depending on values read from uninitialized\n memory in strtold on certain architectures - fix mapping\n alignment computation in dl-load - fix i486+ strncat\n inline assembly - make gethostid/sethostid work on\n bi-arch platforms - fix ppc64 getcontext/swapcontext -\n fix pthread_exit if called after pthread_create, but\n before the created thread actually started - fix return\n values for tgamma (+-0) - fix handling of very long\n lines in /etc/hosts - avoid page aliasing of thread\n stacks on AMD64 - avoid busy loop in malloc if\n concurrent with fork - allow putenv and setenv in shared\n library constructors - fix restoring of CCR in\n swapcontext and getcontext on ppc64 - avoid using\n sigaction (SIGPIPE, ...) in syslog implementation\n\nAll users of glibc should upgrade to these updated packages, which\nresolve these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://lists.centos.org/pipermail/centos-announce/2005-May/011675.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://lists.centos.org/pipermail/centos-announce/2005-May/011720.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://lists.centos.org/pipermail/centos-announce/2005-May/011721.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://lists.centos.org/pipermail/centos-announce/2005-May/011729.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://lists.centos.org/pipermail/centos-announce/2005-May/011730.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected glibc packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-debug\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-profile\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:glibc-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:nptl-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/07/03\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2004/08/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2018 Tenable Network Security, Inc.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/CentOS/release\")) audit(AUDIT_OS_NOT, \"CentOS\");\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-common-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-debug-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-devel-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-headers-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-profile-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"glibc-utils-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"nptl-devel-2.3.2-95.33\")) flag++;\nif (rpm_check(release:\"CentOS-3\", reference:\"nscd-2.3.2-95.33\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());\n else security_note(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2018-09-01T23:34:34", "references": ["https://security.gentoo.org/glsa/200408-16"], "pluginID": "14572", "description": "The remote host is affected by the vulnerability described in GLSA-200408-16 (glibc: Information leak with LD_DEBUG)\n\n Silvio Cesare discovered a potential information leak in glibc. It allows LD_DEBUG on SUID binaries where it should not be allowed. This has various security implications, which may be used to gain confidential information.\n Impact :\n\n An attacker can gain the list of symbols a SUID application uses and their locations and can then use a trojaned library taking precendence over those symbols to gain information or perform further exploitation.\n Workaround :\n\n There is no known workaround at this time. All users are encouraged to upgrade to the latest available version of glibc.", "edition": 6, "reporter": "Tenable", "published": "2004-08-30T00:00:00", "title": "GLSA-200408-16 : glibc: Information leak with LD_DEBUG", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2004-1453"], "modified": "2018-08-10T00:00:00", "cpe": ["cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:glibc"], "id": "GENTOO_GLSA-200408-16.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=14572", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 200408-16.\n#\n# The advisory text is Copyright (C) 2001-2016 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(14572);\n script_version(\"1.14\");\n script_cvs_date(\"Date: 2018/08/10 18:07:05\");\n\n script_cve_id(\"CVE-2004-1453\");\n script_xref(name:\"GLSA\", value:\"200408-16\");\n\n script_name(english:\"GLSA-200408-16 : glibc: Information leak with LD_DEBUG\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-200408-16\n(glibc: Information leak with LD_DEBUG)\n\n Silvio Cesare discovered a potential information leak in glibc. It\n allows LD_DEBUG on SUID binaries where it should not be allowed. This\n has various security implications, which may be used to gain\n confidential information.\n \nImpact :\n\n An attacker can gain the list of symbols a SUID application uses and\n their locations and can then use a trojaned library taking precendence\n over those symbols to gain information or perform further exploitation.\n \nWorkaround :\n\n There is no known workaround at this time. All users are encouraged to\n upgrade to the latest available version of glibc.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/200408-16\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All glibc users should upgrade to the latest version:\n # emerge sync\n # emerge -pv your_version\n # emerge your_version\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2004/08/16\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2004/08/30\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2004/08/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2004-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\", \"Host/Gentoo/arch\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\nourarch = get_kb_item(\"Host/Gentoo/arch\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(ppc64)$\") audit(AUDIT_ARCH_NOT, \"ppc64\", ourarch);\n\nflag = 0;\n\nif (qpkg_check(package:\"sys-libs/glibc\", arch:\"ppc64\", unaffected:make_list(\"ge 2.3.4.20040808\"), vulnerable:make_list(\"le 2.3.4.20040605\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:qpkg_report_get());\n else security_note(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc\");\n}\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2018-09-02T00:08:49", "references": ["http://rhn.redhat.com/errata/RHSA-2005-261.html", "https://www.redhat.com/security/data/cve/CVE-2004-1453.html", "https://www.redhat.com/security/data/cve/CVE-2004-1382.html", "https://www.redhat.com/security/data/cve/CVE-2004-0968.html"], "pluginID": "18160", "description": "Updated glibc packages that address several bugs are now available.\n\nThis update has been rated as having low security impact by the Red Hat Security Response Team.\n\nThe GNU libc packages (known as glibc) contain the standard C libraries used by applications.\n\nFlaws in the catchsegv and glibcbug scripts were discovered. A local user could utilize these flaws to overwrite files via a symlink attack on temporary files. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0968 and CVE-2004-1382 to these issues.\n\nIt was discovered that the use of LD_DEBUG and LD_SHOW_AUXV were not restricted for a setuid program. A local user could utilize this flaw to gain information, such as the list of symbols used by the program.\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-1453 to this issue.\n\nThis erratum also addresses the following bugs in the GNU C Library: - Now avoids calling sigaction (SIGPIPE, ...) in syslog implementation - Fixed poll on Itanium - Now allows setenv/putenv in shared library constructors\n\nUsers of glibc are advised to upgrade to these erratum packages that remove the unnecessary glibcbug script and contain backported patches to correct these other issues.", "edition": 6, "reporter": "Tenable", "published": "2005-04-29T00:00:00", "title": "RHEL 2.1 : glibc (RHSA-2005:261)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2004-1382", "CVE-2004-1453", "CVE-2004-0968"], "modified": "2018-08-13T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:2.1", "p-cpe:/a:redhat:enterprise_linux:glibc", "p-cpe:/a:redhat:enterprise_linux:glibc-common", "p-cpe:/a:redhat:enterprise_linux:glibc-devel", "p-cpe:/a:redhat:enterprise_linux:nscd", "p-cpe:/a:redhat:enterprise_linux:glibc-profile"], "id": "REDHAT-RHSA-2005-261.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=18160", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2005:261. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(18160);\n script_version (\"1.21\");\n script_cvs_date(\"Date: 2018/08/13 14:32:37\");\n\n script_cve_id(\"CVE-2004-0968\", \"CVE-2004-1382\", \"CVE-2004-1453\");\n script_xref(name:\"RHSA\", value:\"2005:261\");\n\n script_name(english:\"RHEL 2.1 : glibc (RHSA-2005:261)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated glibc packages that address several bugs are now available.\n\nThis update has been rated as having low security impact by the Red\nHat Security Response Team.\n\nThe GNU libc packages (known as glibc) contain the standard C\nlibraries used by applications.\n\nFlaws in the catchsegv and glibcbug scripts were discovered. A local\nuser could utilize these flaws to overwrite files via a symlink attack\non temporary files. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CVE-2004-0968 and CVE-2004-1382\nto these issues.\n\nIt was discovered that the use of LD_DEBUG and LD_SHOW_AUXV were not\nrestricted for a setuid program. A local user could utilize this flaw\nto gain information, such as the list of symbols used by the program.\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CVE-2004-1453 to this issue.\n\nThis erratum also addresses the following bugs in the GNU C Library: -\nNow avoids calling sigaction (SIGPIPE, ...) in syslog implementation -\nFixed poll on Itanium - Now allows setenv/putenv in shared library\nconstructors\n\nUsers of glibc are advised to upgrade to these erratum packages that\nremove the unnecessary glibcbug script and contain backported patches\nto correct these other issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2004-0968.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2004-1382.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.redhat.com/security/data/cve/CVE-2004-1453.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://rhn.redhat.com/errata/RHSA-2005-261.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:glibc-profile\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:nscd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:2.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/04/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/04/29\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2004/08/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2005-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^2\\.1([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 2.1\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2005:261\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL2.1\", cpu:\"i386\", reference:\"glibc-2.2.4-32.20\")) flag++;\n if (rpm_check(release:\"RHEL2.1\", cpu:\"i686\", reference:\"glibc-2.2.4-32.20\")) flag++;\n if (rpm_check(release:\"RHEL2.1\", cpu:\"i386\", reference:\"glibc-common-2.2.4-32.20\")) flag++;\n if (rpm_check(release:\"RHEL2.1\", cpu:\"i386\", reference:\"glibc-devel-2.2.4-32.20\")) flag++;\n if (rpm_check(release:\"RHEL2.1\", cpu:\"i386\", reference:\"glibc-profile-2.2.4-32.20\")) flag++;\n if (rpm_check(release:\"RHEL2.1\", cpu:\"i386\", reference:\"nscd-2.2.4-32.20\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"glibc / glibc-common / glibc-devel / glibc-profile / nscd\");\n }\n}\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}], "openvas": [{"lastseen": "2017-07-24T12:50:12", "references": [], "pluginID": "54646", "description": "The remote host is missing updates announced in\nadvisory GLSA 200408-16.", "edition": 2, "reporter": "Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com", "published": "2008-09-24T00:00:00", "title": "Gentoo Security Advisory GLSA 200408-16 (glibc)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2004-1453"], "modified": "2017-07-07T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=54646", "id": "OPENVAS:54646", "sourceData": "# OpenVAS Vulnerability Test\n# $\n# Description: Auto generated from Gentoo's XML based advisory\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisories, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"glibc contains an information leak vulnerability allowing the debugging of\nSUID binaries.\";\ntag_solution = \"All glibc users should upgrade to the latest version:\n\n # emerge sync\n\n # emerge -pv your_version\n # emerge your_version\n\nhttp://www.securityspace.com/smysecure/catid.html?in=GLSA%20200408-16\nhttp://bugs.gentoo.org/show_bug.cgi?id=59526\";\ntag_summary = \"The remote host is missing updates announced in\nadvisory GLSA 200408-16.\";\n\n \n\nif(description)\n{\n script_id(54646);\n script_cve_id(\"CVE-2004-1453\");\n script_tag(name:\"cvss_base\", value:\"2.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:P/I:N/A:N\");\n script_version(\"$Revision: 6596 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-07 11:21:37 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2008-09-24 21:14:03 +0200 (Wed, 24 Sep 2008)\");\n script_name(\"Gentoo Security Advisory GLSA 200408-16 (glibc)\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"Gentoo Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = ispkgvuln(pkg:\"sys-libs/glibc\", unaffected: make_list(\"ge 2.3.2-r11\"), vulnerable: make_list(\"le 2.3.2-r10\"))) != NULL) {\n report += res;\n}\nif ((res = ispkgvuln(pkg:\"sys-libs/glibc\", unaffected: make_list(\"ge 2.3.3.20040420-r1\"), vulnerable: make_list(\"le 2.3.3.20040420\"))) != NULL) {\n report += res;\n}\nif ((res = ispkgvuln(pkg:\"sys-libs/glibc\", unaffected: make_list(\"ge 2.3.4.20040619-r1\"), vulnerable: make_list(\"le 2.3.3.20040420\"))) != NULL) {\n report += res;\n}\nif ((res = ispkgvuln(pkg:\"sys-libs/glibc\", unaffected: make_list(\"ge 2.3.4.20040619-r1\"), vulnerable: make_list(\"le 2.3.4.20040619\"))) != NULL) {\n report += res;\n}\nif ((res = ispkgvuln(pkg:\"sys-libs/glibc\", unaffected: make_list(\"ge 2.3.4.20040808\"), vulnerable: make_list(\"le 2.3.4.20040605\"))) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}], "redhat": [{"lastseen": "2017-08-02T22:57:25", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-2.3.2-95.33.i686.rpm", "packageName": "glibc", "arch": "i686", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-2.3.2-95.33.ia64.rpm", "packageName": "glibc", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-common-2.3.2-95.33.ia64.rpm", "packageName": "glibc-common", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-devel-2.3.2-95.33.ia64.rpm", "packageName": "glibc-devel", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-headers-2.3.2-95.33.ia64.rpm", "packageName": "glibc-headers", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-profile-2.3.2-95.33.ia64.rpm", "packageName": "glibc-profile", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "glibc-utils-2.3.2-95.33.ia64.rpm", "packageName": "glibc-utils", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "nptl-devel-2.3.2-95.33.ia64.rpm", "packageName": "nptl-devel", "arch": "ia64", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.3.2-95.33", "packageFilename": "nscd-2.3.2-95.33.ia64.rpm", "packageName": "nscd", "arch": "ia64", "operator": "lt"}], "description": "The GNU libc packages (known as glibc) contain the standard C libraries\nused by applications.\n\nIt was discovered that the use of LD_DEBUG, LD_SHOW_AUXV, and\nLD_DYNAMIC_WEAK were not restricted for a setuid program. A local user\ncould utilize this flaw to gain information, such as the list of symbols\nused by the program. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-1453 to this issue.\n\nThis erratum addresses the following bugs in the GNU C Library:\n\n- fix stack alignment in IA-32 clone\n- fix double free in globfree\n- fix fnmatch to avoid jumping based on unitialized memory read\n- fix fseekpos after ungetc\n- fix TZ env var handling if the variable ends with + or -\n- avoid depending on values read from unitialized memory in strtold\n on certain architectures\n- fix mapping alignment computation in dl-load\n- fix i486+ strncat inline assembly\n- make gethostid/sethostid work on bi-arch platforms\n- fix ppc64 getcontext/swapcontext\n- fix pthread_exit if called after pthread_create, but before the created\n thread actually started\n- fix return values for tgamma (+-0)\n- fix handling of very long lines in /etc/hosts\n- avoid page aliasing of thread stacks on AMD64\n- avoid busy loop in malloc if concurrent with fork\n- allow putenv and setenv in shared library constructors\n- fix restoring of CCR in swapcontext and getcontext on ppc64\n- avoid using sigaction (SIGPIPE, ...) in syslog implementation\n\nAll users of glibc should upgrade to these updated packages, which resolve\nthese issues.", "reporter": "RedHat", "published": "2005-05-18T04:00:00", "type": "redhat", "title": "(RHSA-2005:256) glibc security update", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "bulletinFamily": "unix", "cvelist": ["CVE-2004-1453"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2017-07-29T20:34:02", "id": "RHSA-2005:256", "href": "https://access.redhat.com/errata/RHSA-2005:256", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2018-03-28T01:01:46", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "ia64", "packageFilename": "glibc-common-2.2.4-32.20.ia64.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "i386", "packageFilename": "nscd-2.2.4-32.20.i386.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "ia64", "packageFilename": "glibc-devel-2.2.4-32.20.ia64.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "i386", "packageFilename": "glibc-2.2.4-32.20.i386.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "i386", "packageFilename": "glibc-devel-2.2.4-32.20.i386.rpm", "packageName": "glibc-devel", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "ia64", "packageFilename": "glibc-2.2.4-32.20.ia64.rpm", "packageName": "glibc", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "ia64", "packageFilename": "glibc-profile-2.2.4-32.20.ia64.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "i386", "packageFilename": "glibc-profile-2.2.4-32.20.i386.rpm", "packageName": "glibc-profile", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "ia64", "packageFilename": "nscd-2.2.4-32.20.ia64.rpm", "packageName": "nscd", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "i386", "packageFilename": "glibc-common-2.2.4-32.20.i386.rpm", "packageName": "glibc-common", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "any", "packageVersion": "2.2.4-32.20", "arch": "i686", "packageFilename": "glibc-2.2.4-32.20.i686.rpm", "packageName": "glibc", "operator": "lt"}], "description": "The GNU libc packages (known as glibc) contain the standard C libraries\nused by applications.\n\nFlaws in the catchsegv and glibcbug scripts were discovered. A local user\ncould utilize these flaws to overwrite files via a symlink attack on\ntemporary files. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0968 and CAN-2004-1382 to\nthese issues.\n\nIt was discovered that the use of LD_DEBUG and LD_SHOW_AUXV were not\nrestricted for a setuid program. A local user could utilize this flaw to\ngain information, such as the list of symbols used by the program. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2004-1453 to this issue.\n\nThis erratum also addresses the following bugs in the GNU C Library:\n- Now avoids calling sigaction (SIGPIPE, ...) in syslog implementation\n- Fixed poll on Itanium\n- Now allows setenv/putenv in shared library constructors\n\nUsers of glibc are advised to upgrade to these erratum packages that remove\nthe unecessary glibcbug script and contain backported patches to correct\nthese other issues.", "reporter": "RedHat", "published": "2005-04-28T04:00:00", "type": "redhat", "title": "(RHSA-2005:261) glibc security update", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "bulletinFamily": "unix", "cvelist": ["CVE-2004-0968", "CVE-2004-1382", "CVE-2004-1453"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-03-14T19:27:08", "id": "RHSA-2005:261", "href": "https://access.redhat.com/errata/RHSA-2005:261", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}]}