home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2002-060.nasl < prev    next >
Encoding:
Text File  |  2005-01-14  |  5.1 KB  |  204 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2002:060
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(13961);
  12.  script_bugtraq_id(3073, 3074);
  13.  script_version ("$Revision: 1.3 $");
  14.  script_cve_id("CAN-2001-1374", "CAN-2001-1375");
  15.  
  16.  name["english"] = "MDKSA-2002:060: tcltk";
  17.  
  18.  script_name(english:name["english"]);
  19.  
  20.  desc["english"] = "
  21. The remote host is missing the patch for the advisory MDKSA-2002:060 (tcltk).
  22.  
  23.  
  24. Some problems were discovered with the Tcl/Tk development environment. The
  25. expect application would search for its libraries in /var/tmp prior to searching
  26. in other directories, which could allow a local user to gain root privilege by
  27. writing a trojan library and waiting for the root user to run the mkpasswd
  28. utility. This is fixed in version 5.32 of expect. A similiar vulnerability has
  29. been fixed in the tcltk package which searched for its libraries in the current
  30. working directory prior to searching in other directories. This could be used to
  31. execute arbitrary code by local users through the use of a trojan library.
  32.  
  33.  
  34. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060
  35. Risk factor : High";
  36.  
  37.  
  38.  
  39.  script_description(english:desc["english"]);
  40.  
  41.  summary["english"] = "Check for the version of the tcltk package";
  42.  script_summary(english:summary["english"]);
  43.  
  44.  script_category(ACT_GATHER_INFO);
  45.  
  46.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  47.  family["english"] = "Mandrake Local Security Checks";
  48.  script_family(english:family["english"]);
  49.  
  50.  script_dependencies("ssh_get_info.nasl");
  51.  script_require_keys("Host/Mandrake/rpm-list");
  52.  exit(0);
  53. }
  54.  
  55. include("rpm.inc");
  56. if ( rpm_check( reference:"expect-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  57. {
  58.  security_hole(0);
  59.  exit(0);
  60. }
  61. if ( rpm_check( reference:"itcl-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  62. {
  63.  security_hole(0);
  64.  exit(0);
  65. }
  66. if ( rpm_check( reference:"tcl-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  67. {
  68.  security_hole(0);
  69.  exit(0);
  70. }
  71. if ( rpm_check( reference:"tcllib-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  72. {
  73.  security_hole(0);
  74.  exit(0);
  75. }
  76. if ( rpm_check( reference:"tclx-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  77. {
  78.  security_hole(0);
  79.  exit(0);
  80. }
  81. if ( rpm_check( reference:"tix-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  82. {
  83.  security_hole(0);
  84.  exit(0);
  85. }
  86. if ( rpm_check( reference:"tk-8.3.3-21.3mdk", release:"MDK7.2", yank:"mdk") )
  87. {
  88.  security_hole(0);
  89.  exit(0);
  90. }
  91. if ( rpm_check( reference:"expect-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  92. {
  93.  security_hole(0);
  94.  exit(0);
  95. }
  96. if ( rpm_check( reference:"itcl-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  97. {
  98.  security_hole(0);
  99.  exit(0);
  100. }
  101. if ( rpm_check( reference:"tcl-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  102. {
  103.  security_hole(0);
  104.  exit(0);
  105. }
  106. if ( rpm_check( reference:"tcllib-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  107. {
  108.  security_hole(0);
  109.  exit(0);
  110. }
  111. if ( rpm_check( reference:"tclx-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  112. {
  113.  security_hole(0);
  114.  exit(0);
  115. }
  116. if ( rpm_check( reference:"tix-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  117. {
  118.  security_hole(0);
  119.  exit(0);
  120. }
  121. if ( rpm_check( reference:"tk-8.3.3-21.3mdk", release:"MDK8.0", yank:"mdk") )
  122. {
  123.  security_hole(0);
  124.  exit(0);
  125. }
  126. if ( rpm_check( reference:"expect-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  127. {
  128.  security_hole(0);
  129.  exit(0);
  130. }
  131. if ( rpm_check( reference:"itcl-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  132. {
  133.  security_hole(0);
  134.  exit(0);
  135. }
  136. if ( rpm_check( reference:"tcl-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  137. {
  138.  security_hole(0);
  139.  exit(0);
  140. }
  141. if ( rpm_check( reference:"tcllib-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  142. {
  143.  security_hole(0);
  144.  exit(0);
  145. }
  146. if ( rpm_check( reference:"tclx-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  147. {
  148.  security_hole(0);
  149.  exit(0);
  150. }
  151. if ( rpm_check( reference:"tix-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  152. {
  153.  security_hole(0);
  154.  exit(0);
  155. }
  156. if ( rpm_check( reference:"tk-8.3.3-21.3mdk", release:"MDK8.1", yank:"mdk") )
  157. {
  158.  security_hole(0);
  159.  exit(0);
  160. }
  161. if ( rpm_check( reference:"expect-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  162. {
  163.  security_hole(0);
  164.  exit(0);
  165. }
  166. if ( rpm_check( reference:"itcl-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  167. {
  168.  security_hole(0);
  169.  exit(0);
  170. }
  171. if ( rpm_check( reference:"tcl-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  172. {
  173.  security_hole(0);
  174.  exit(0);
  175. }
  176. if ( rpm_check( reference:"tcllib-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  177. {
  178.  security_hole(0);
  179.  exit(0);
  180. }
  181. if ( rpm_check( reference:"tclx-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  182. {
  183.  security_hole(0);
  184.  exit(0);
  185. }
  186. if ( rpm_check( reference:"tix-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  187. {
  188.  security_hole(0);
  189.  exit(0);
  190. }
  191. if ( rpm_check( reference:"tk-8.3.3-21.3mdk", release:"MDK8.2", yank:"mdk") )
  192. {
  193.  security_hole(0);
  194.  exit(0);
  195. }
  196. if (rpm_exists(rpm:"tcltk-", release:"MDK7.2")
  197.  || rpm_exists(rpm:"tcltk-", release:"MDK8.0")
  198.  || rpm_exists(rpm:"tcltk-", release:"MDK8.1")
  199.  || rpm_exists(rpm:"tcltk-", release:"MDK8.2") )
  200. {
  201.  set_kb_item(name:"CAN-2001-1374", value:TRUE);
  202.  set_kb_item(name:"CAN-2001-1375", value:TRUE);
  203. }
  204.