home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / mandrake_MDKSA-2003-118.nasl < prev    next >
Encoding:
Text File  |  2005-01-14  |  6.8 KB  |  263 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # This plugin text was extracted from Mandrake Linux Security Advisory MDKSA-2003:118
  5. #
  6.  
  7.  
  8. if ( ! defined_func("bn_random") ) exit(0);
  9. if(description)
  10. {
  11.  script_id(14100);
  12.  script_version ("$Revision: 1.2 $");
  13.  script_cve_id("CAN-2003-0690");
  14.  
  15.  name["english"] = "MDKSA-2003:118: XFree86";
  16.  
  17.  script_name(english:name["english"]);
  18.  
  19.  desc["english"] = "
  20. The remote host is missing the patch for the advisory MDKSA-2003:118 (XFree86).
  21.  
  22.  
  23. A vulnerability was discovered in the XDM display manager that ships with
  24. XFree86. XDM does not check for successful completion of the pam_setcred() call
  25. and in the case of error conditions in the installed PAM modules, XDM may grant
  26. local root access to any user with valid login credentials. It has been reported
  27. that a certain configuration of the MIT pam_krb5 module can result in a failing
  28. pam_setcred() call which leaves the session alive and would provide root access
  29. to any regular user. It is also possible that this vulnerability can likewise be
  30. exploited with other PAM modules in a similar manner.
  31. A backported patch from XFree86 4.3 that corrects this vulnerability has been
  32. applied to these updated packages.
  33.  
  34.  
  35. Solution : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:118
  36. Risk factor : High";
  37.  
  38.  
  39.  
  40.  script_description(english:desc["english"]);
  41.  
  42.  summary["english"] = "Check for the version of the XFree86 package";
  43.  script_summary(english:summary["english"]);
  44.  
  45.  script_category(ACT_GATHER_INFO);
  46.  
  47.  script_copyright(english:"This script is Copyright (C) 2004 Tenable Network Security");
  48.  family["english"] = "Mandrake Local Security Checks";
  49.  script_family(english:family["english"]);
  50.  
  51.  script_dependencies("ssh_get_info.nasl");
  52.  script_require_keys("Host/Mandrake/rpm-list");
  53.  exit(0);
  54. }
  55.  
  56. include("rpm.inc");
  57. if ( rpm_check( reference:"XFree86-100dpi-fonts-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  58. {
  59.  security_hole(0);
  60.  exit(0);
  61. }
  62. if ( rpm_check( reference:"XFree86-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  63. {
  64.  security_hole(0);
  65.  exit(0);
  66. }
  67. if ( rpm_check( reference:"XFree86-75dpi-fonts-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  68. {
  69.  security_hole(0);
  70.  exit(0);
  71. }
  72. if ( rpm_check( reference:"XFree86-devel-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  73. {
  74.  security_hole(0);
  75.  exit(0);
  76. }
  77. if ( rpm_check( reference:"XFree86-doc-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  78. {
  79.  security_hole(0);
  80.  exit(0);
  81. }
  82. if ( rpm_check( reference:"XFree86-glide-module-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  83. {
  84.  security_hole(0);
  85.  exit(0);
  86. }
  87. if ( rpm_check( reference:"XFree86-libs-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  88. {
  89.  security_hole(0);
  90.  exit(0);
  91. }
  92. if ( rpm_check( reference:"XFree86-server-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  93. {
  94.  security_hole(0);
  95.  exit(0);
  96. }
  97. if ( rpm_check( reference:"XFree86-static-libs-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  98. {
  99.  security_hole(0);
  100.  exit(0);
  101. }
  102. if ( rpm_check( reference:"XFree86-xfs-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  103. {
  104.  security_hole(0);
  105.  exit(0);
  106. }
  107. if ( rpm_check( reference:"XFree86-Xnest-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  108. {
  109.  security_hole(0);
  110.  exit(0);
  111. }
  112. if ( rpm_check( reference:"XFree86-Xvfb-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  113. {
  114.  security_hole(0);
  115.  exit(0);
  116. }
  117. if ( rpm_check( reference:"X11R6-contrib-4.2.1-3.2.90mdk", release:"MDK9.0", yank:"mdk") )
  118. {
  119.  security_hole(0);
  120.  exit(0);
  121. }
  122. if ( rpm_check( reference:"XFree86-100dpi-fonts-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  123. {
  124.  security_hole(0);
  125.  exit(0);
  126. }
  127. if ( rpm_check( reference:"XFree86-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  128. {
  129.  security_hole(0);
  130.  exit(0);
  131. }
  132. if ( rpm_check( reference:"XFree86-75dpi-fonts-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  133. {
  134.  security_hole(0);
  135.  exit(0);
  136. }
  137. if ( rpm_check( reference:"XFree86-cyrillic-fonts-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  138. {
  139.  security_hole(0);
  140.  exit(0);
  141. }
  142. if ( rpm_check( reference:"XFree86-devel-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  143. {
  144.  security_hole(0);
  145.  exit(0);
  146. }
  147. if ( rpm_check( reference:"XFree86-doc-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  148. {
  149.  security_hole(0);
  150.  exit(0);
  151. }
  152. if ( rpm_check( reference:"XFree86-glide-module-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  153. {
  154.  security_hole(0);
  155.  exit(0);
  156. }
  157. if ( rpm_check( reference:"XFree86-libs-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  158. {
  159.  security_hole(0);
  160.  exit(0);
  161. }
  162. if ( rpm_check( reference:"XFree86-server-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  163. {
  164.  security_hole(0);
  165.  exit(0);
  166. }
  167. if ( rpm_check( reference:"XFree86-static-libs-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  168. {
  169.  security_hole(0);
  170.  exit(0);
  171. }
  172. if ( rpm_check( reference:"XFree86-xfs-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  173. {
  174.  security_hole(0);
  175.  exit(0);
  176. }
  177. if ( rpm_check( reference:"XFree86-Xnest-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  178. {
  179.  security_hole(0);
  180.  exit(0);
  181. }
  182. if ( rpm_check( reference:"XFree86-Xvfb-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  183. {
  184.  security_hole(0);
  185.  exit(0);
  186. }
  187. if ( rpm_check( reference:"X11R6-contrib-4.3-8.4.91mdk", release:"MDK9.1", yank:"mdk") )
  188. {
  189.  security_hole(0);
  190.  exit(0);
  191. }
  192. if ( rpm_check( reference:"XFree86-100dpi-fonts-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  193. {
  194.  security_hole(0);
  195.  exit(0);
  196. }
  197. if ( rpm_check( reference:"XFree86-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  198. {
  199.  security_hole(0);
  200.  exit(0);
  201. }
  202. if ( rpm_check( reference:"XFree86-75dpi-fonts-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  203. {
  204.  security_hole(0);
  205.  exit(0);
  206. }
  207. if ( rpm_check( reference:"XFree86-cyrillic-fonts-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  208. {
  209.  security_hole(0);
  210.  exit(0);
  211. }
  212. if ( rpm_check( reference:"XFree86-doc-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  213. {
  214.  security_hole(0);
  215.  exit(0);
  216. }
  217. if ( rpm_check( reference:"XFree86-glide-module-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  218. {
  219.  security_hole(0);
  220.  exit(0);
  221. }
  222. if ( rpm_check( reference:"XFree86-server-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  223. {
  224.  security_hole(0);
  225.  exit(0);
  226. }
  227. if ( rpm_check( reference:"XFree86-xfs-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  228. {
  229.  security_hole(0);
  230.  exit(0);
  231. }
  232. if ( rpm_check( reference:"XFree86-Xnest-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  233. {
  234.  security_hole(0);
  235.  exit(0);
  236. }
  237. if ( rpm_check( reference:"XFree86-Xvfb-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  238. {
  239.  security_hole(0);
  240.  exit(0);
  241. }
  242. if ( rpm_check( reference:"X11R6-contrib-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  243. {
  244.  security_hole(0);
  245.  exit(0);
  246. }
  247. if ( rpm_check( reference:"libxfree86-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  248. {
  249.  security_hole(0);
  250.  exit(0);
  251. }
  252. if ( rpm_check( reference:"libxfree86-devel-4.3-24.1.92mdk", release:"MDK9.2", yank:"mdk") )
  253. {
  254.  security_hole(0);
  255.  exit(0);
  256. }
  257. if (rpm_exists(rpm:"XFree86-", release:"MDK9.0")
  258.  || rpm_exists(rpm:"XFree86-", release:"MDK9.1")
  259.  || rpm_exists(rpm:"XFree86-", release:"MDK9.2") )
  260. {
  261.  set_kb_item(name:"CAN-2003-0690", value:TRUE);
  262. }
  263.