############################################################################## # # Red Hat local check # # Revision: # $Revision: 1.7 $ # # ------------------------------------------------------------------------ # # This program was written by StillSecure and is licensed under the GNU # GPL license. Please see below for details. This header contains # information regarding licensing terms under the GPL, and information # regarding obtaining source code from the Author. Consequently, pursuant # to section 3(c) of the GPL, you must accompany the information found in # this header with any distribution you make of this Program. # # Copyright (C) 2005. Latis Networks, Inc (d/b/a StillSecure) # Please see www.stillsecure.com/opensource and # www.stillsecure.com/policies/copyright.php for further information. # # ------------------------------------------------------------------------ # # Obtaining Source Code from StillSecure # # StillSecure delivers network security solutions that protect IT # business infrastructure. The integrated StillSecure suite provides # preventative defense, enables compliance with regulatory information # security policies, and actively blocks network attacks. StillSecure # manages and reduces risk from network attack and noncompliance for some # of the largest organizations in the healthcare, financial services, # government, and education sectors. # # VAM - vulnerability management platform # StillSecure VAM manages the vulnerability remediation process from # end-to-end, allowing you to quickly and systematically fix # vulnerabilities that expose your organization to attack. # # Border Guard - network intrusion detection/prevention # StillSecure Border Guard, named SC Magazine's best IPS of 2004, is a # network intrusion detection/prevention system (IDS/IPS) that identifies # and terminates viruses, worms, Trojans, port scans, and other malicious # traffic before they enter the network. # # Safe Access - endpoint policy compliance # Information Security's Hotpick in 2004, SillSecure Safe Access # protects the network by ensuring that endpoint devices are free from # threats and in compliance with IT security policies. # # StillSecure will offer, for three years from the date this program was # released, to give any third party, for a charge no more than # StillSecure's cost of physically performing source distribution, a # complete machine-readable copy of the corresponding source code, # distributed under the terms of the GPL, on a medium customarily used for # software interchange. # # ------------------------------------------------------------------------ # # About the license for this program: # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License v2 as published by the # Free Software Foundation. This program is distributed WITHOUT ANY # WARRANTY; without even the implied warranty of MERCHANTABILITY or # FITNESS FOR A PARTICULAR PURPOSE. You should have received a copy of # the GNU General Public License with this program; if not, go to # www.gnu.org/licenses/gpl.txt # # ------------------------------------------------------------------------ # # For further information regarding this program or to purchase any # StillSecure products please write to sales@stillsecure.com or call # (303) 381-3800. # # LOCAL_CHECK=YES ############################################################################## # The plugin text is copyright Red Hat, Inc. if ( ! defined_func("bn_random") ) exit(0); if(description) { script_id(400616); script_version ("$Revision: 1.7 $"); script_cve_id("CVE-2003-0461","CVE-2003-0462","CVE-2003-0464","CVE-2003-0476","CVE-2003-0501","CVE-2003-0550","CVE-2003-0551","CVE-2003-0552","CVE-2003-0699","CVE-2003-0700","CAN-2003-0699","CAN-2003-0461","CAN-2003-0462","CAN-2003-0464","CAN-2003-0476","CAN-2003-0501","CAN-2003-0550","CAN-2003-0551","CAN-2003-0552","CAN-2003-0700"); name["english"] = "RH8 : Updated 2.4 kernel fixes vulnerabilities"; script_name(english:name["english"]); desc["english"] = ' Details Updated kernel packages are now available fixing several security vulnerabilities. [Updated 28 August 2003] Added CAN-2003-0699 and CAN-2003-0700 to the list of security issues that are fixed by this advisory (there are no changes to the packages themselves). The Linux kernel handles the basic functions of the operating system. Several security issues have been discovered affecting the Linux kernel: CAN-2003-0461: /proc/tty/driver/serial reveals the exact character counts for serial links. This could be used by a local attacker to infer password lengths and inter-keystroke timings during password entry. Description truncated, please see reference URL below for more information. Reference: http://rhn.redhat.com//errata/RHSA-2003-238.html Packages affected: Refer to vendor website for up to date details on packages affected. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To use Red Hat Network to upgrade the kernel, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly if you are using the default configuration of up2date. To install kernel packages manually, use rpm -ivh package modify system settings to boot the kernel you have installed. To do this, edit /boot/grub/grub.conf and change the default entry to default=0 (or, if you have chosen to use LILO as your boot loader, edit /etc/lilo.conf and run lilo) Do not use rpm -Uvh as that will remove your running kernel binaries from your system. You may use rpm -e to remove old kernels after determining that the new kernel functions properly on your system. Risk factor : High'; script_description(english:desc["english"]); summary["english"] = "RH8 : Updated 2.4 kernel fixes vulnerabilities"; script_summary(english:summary["english"]); script_category(ACT_GATHER_INFO); script_copyright(english:"Copyright (C) 2005-2006 StillSecure"); family["english"] = "Red Hat Local Security Checks"; script_family(english:family["english"]); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/RedHat/rpm-list"); exit(0); } include("rpm.inc"); if ( rpm_check(reference:"kernel-2.4.20-19.7", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-BOOT-2.4.20-19.7", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-bigmem-2.4.20-19.7", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-doc-2.4.20-19.7", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-smp-2.4.20-19.7", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-source-2.4.20-19.7", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-2.4.20-19.8", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-BOOT-2.4.20-19.8", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-bigmem-2.4.20-19.8", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-doc-2.4.20-19.8", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-smp-2.4.20-19.8", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-source-2.4.20-19.8", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-2.4.20-19.9", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-BOOT-2.4.20-19.9", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-bigmem-2.4.20-19.9", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-doc-2.4.20-19.9", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-smp-2.4.20-19.9", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_check(reference:"kernel-source-2.4.20-19.9", release:"RH8") ) { security_hole(0); exit(0); } if ( rpm_exists(rpm:"kernel-", release:"RH8") ) { set_kb_item(name:"CVE-2003-0461", value:TRUE); set_kb_item(name:"CVE-2003-0462", value:TRUE); set_kb_item(name:"CVE-2003-0464", value:TRUE); set_kb_item(name:"CVE-2003-0476", value:TRUE); set_kb_item(name:"CVE-2003-0501", value:TRUE); set_kb_item(name:"CVE-2003-0550", value:TRUE); set_kb_item(name:"CVE-2003-0551", value:TRUE); set_kb_item(name:"CVE-2003-0552", value:TRUE); set_kb_item(name:"CVE-2003-0699", value:TRUE); set_kb_item(name:"CVE-2003-0700", value:TRUE); set_kb_item(name:"CAN-2003-0699", value:TRUE); set_kb_item(name:"CAN-2003-0461", value:TRUE); set_kb_item(name:"CAN-2003-0462", value:TRUE); set_kb_item(name:"CAN-2003-0464", value:TRUE); set_kb_item(name:"CAN-2003-0476", value:TRUE); set_kb_item(name:"CAN-2003-0501", value:TRUE); set_kb_item(name:"CAN-2003-0550", value:TRUE); set_kb_item(name:"CAN-2003-0551", value:TRUE); set_kb_item(name:"CAN-2003-0552", value:TRUE); set_kb_item(name:"CAN-2003-0700", value:TRUE); exit(0); } set_kb_item(name:"RHSA-2003-238", value:TRUE);