Linux: kernel.sysrq in /etc/sysctl.conf

SysRq enables users with physical access to access dangerous system-level commands in a computer. Therefore, it is advised to restrict the usage of the SysRq function. Note: This scripts looks for SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a reference...

Linux: TCP timestamps

The tcptimestamps function makes the system prone to DoS attacks. This script tests whether the Linux host is configured to disable tcptimestamps. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Linux: Read sysctl config files (KB)

sysctl.conf is a simple file containing sysctl values to be read in and set by sysctl. Files to consider: /etc/sysctl.conf, /etc/sysctl.d/. Note: This script only stores information for other Policy Controls. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from ...

Linux: Log non-standard ICMP messages

To reduce logfile size, it is possible to ignore ICMP messages that do not match standards. This script tests whether the Linux host is configured to ignore non-standard ICMP messages. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

OracleVM 3.3 / 3.4 : procps (OVMSA-2018-0226)

The remote OracleVM system is missing necessary patches to address critical security updates : - vmstat: fix invalid CPU utilization stats after vCPU hot-plug/unplug Konrad Rzeszutek Wilk bug 18011019 - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression - Resolves:...

gdm security update

gdm 2.16.0-59.0.1.el59.1 - Fix gdmconfig memory leaks orabug 12734629 2.16.0-59.1 - Don't try to pre-create directories that are internal implementation details of X. Resolves: 997619 CVE-2013-4169 initscripts 8.45.42-2.0.1.el59.1 - Do not rename eth devices. Orabug 14266688. Apply upstream...

Oracle Linux 5 : initscripts (ELSA-2012-0312)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0312 advisory. 8.45.42-1.0.1.el5 - Update oracle-enterprise.patch to do detection on /etc/oracle-release and /etc/enterprise-release - Patch x8664 sysctl.conf as well as defau...

initscripts security and bug fix update

8.45.42-1.0.1.el5 - Update oracle-enterprise.patch to do detection on /etc/oracle-release and /etc/enterprise-release - Patch x8664 sysctl.conf as well as default sysctl.conf - Patch sysctl.conf to default rpfilter to loose reverse path filtering has no effect for pre-2.6.32 kernels orabug 102862...