Nessus Plugin #15329

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA492] DSA-492-1 iproute

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-492-1 iproute

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0856

Bugtraq_id:

9092

Xrefs:

DSA:492

Description:

Herbert Xu reported that local users could cause a denial of service
against iproute, a set of tools for controlling networking in Linux
kernels. iproute uses the netlink interface to communicate with the
kernel, but failed to verify that the messages it received came from
the kernel (rather than from other user processes).
For the current stable distribution (woody) this problem has been
fixed in version 20010824-8woody1.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you update your iproute package.


Solution : http://www.debian.org/security/2004/dsa-492
Risk factor : High