7.2 - RHSA-2004:505

Executive Summary

Summary
Title	Updated kernel packages fix security vulnerability

Informations
Name	RHSA-2004:505	First vendor Publication	2004-12-13
Vendor	RedHat	Last vendor Modification	2004-12-13
Severity (Vendor)	N/A	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 2.1. This is the sixth regular update.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - athlon, i386, i686 Red Hat Enterprise Linux ES version 2.1 - athlon, i386, i686 Red Hat Enterprise Linux WS version 2.1 - athlon, i386, i686

3. Problem description:

The Linux kernel handles the basic functions of the operating system.

This is the sixth regular kernel update to Red Hat Enterprise Linux version 2.1. It updates a number of device drivers, and adds much improved SATA support.

This update includes fixes for several security issues:

Paul Starzetz of iSEC discovered various flaws in the ELF binary loader affecting kernels prior to 2.4.28. A local user could use these flaws to gain read access to executable-only binaries or possibly gain privileges. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CAN-2004-1070, CAN-2004-1071, CAN-2004-1072, and CAN-2004-1073 to these issues.

A missing serialization flaw in unix_dgram_recvmsg was discovered that affects kernels prior to 2.4.28. A local user could potentially make use of a race condition in order to gain privileges. (CAN-2004-1068)

Stefan Esser discovered various flaws including buffer overflows in the smbfs driver affecting kernels before 2.4.28. A local user may be able to cause a denial of service (crash) or possibly gain privileges. In order to exploit these flaws the user would need to have control of a connected smb server. (CAN-2004-0883, CAN-2004-0949)

Conectiva discovered flaws in certain USB drivers affecting kernels before 2.4.27 which used the copy_to_user function on uninitialized structures. These flaws could allow local users to read small amounts of kernel memory. (CAN-2004-0685)

The ext3 code in kernels before 2.4.26 did not properly initialize journal descriptor blocks. A privileged local user could read portions of kernel memory. (CAN-2004-0177)

The following drivers have also been updated:

* tg3 v3.10 * e1000 v5.3.19-k2 * e100 v3.0.27-k2 * megaraid * megaraid2 v2.10.8.2

All Red Hat Enterprise Linux 2.1 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum.

4. Solution:

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.

Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website:

https://rhn.redhat.com/help/latest-up2date.pxt

5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info):

132078 - RHEL2.1: Update Megaraid driver from 1.18a to 1.18k 112223 - RHEL 2.1 U6: update kudzu megaraid entries to megaraid2, leaving megaraid as the deprecated driver, available but no longer the default. 113901 - RHEL 2.1 U6: Update pcitable in the initrd.img to load megaraid2 for PERC4 cards as listed below. 75090 - [PATCH] autodetect the megaraid driver for the PERC4 RAID card 128813 - RHEL2.1 U6: cciss Driver Refresh 122776 - RHEL 2.1 U6 - BCM 5721 support in tg3 (x86, x86_64, & IPF) 130700 - RHEL 2.1 U6 x86 and IPF): Refresh e1000 driver (v 5.3.19) 130702 - RHEL 2.1 U6 (x86 and IPF): Refresh e100 driver (v 3.0.27) 128860 - [RHEL2.1][PATCH] Bug from xprt_create_proto of e34 129359 - [RHEL2.1][RHEL3] uncorrectable ECC memory errors do NOT halt the system 125547 - Oops when writing to /proc/scsi/scsi 126317 - [RHEL2.1] Wrong LUN size reported in \'pretty\' format 111219 - VMWare GSX Server - KERNEL PANIC 99025 - kernel: ENOMEM in journal_alloc_journal_head, retrying Dell 6650 131120 - [RHEL2.1][PATCH][RFE] /proc/cpuinfo physical id 131534 - e1000 driver not ethtool aware... 131493 - [RHEL2.1] SCSI midlayer race on scsi_devicelist 133383 - [RHEL2.1] Race with locks in add_gendisk/get_gendisk. 134802 - keyboard.c : Can't emulate raw mode for keycode 272 130926 - [PATCH] read() sometimes crashes in the second pthread_set_canceltype call 137167 - additional symbol exports needed for aio 87734 - bad pte message in boot.log 132609 - RHEL2.1 U6: Vendor/board name of Broadcom BCM5704 is not shown in /proc/pci 137446 - ioctl on HP Smart Array 532 failure 138042 - Add sparse LUN support for IBM ESS Model 2105 and 2145 138443 - Wrong Chaparral FR1422 identifier JSS224 instead of JFS224 127916 - CAN-2004-0136 Verify interpreter (ipf) 134875 - CAN-2004-1070 binfmt_elf loader vulnerabilities (CAN-2004-1071 CAN-2004-1072 CAN-2004-1073) 140711 - CAN-2004-1068 Missing serialisation in unix_dgram_recvmsg 134721 - CAN-2004-0883 smbfs potential DOS (CAN-2004-0949) 127919 - CAN-2004-0685 usb sparse fixes in 2.4 121033 - CAN-2004-0177 ext3 infoleak

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2004-505.html

CWE : Common Weakness Enumeration

%	Id	Name

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10330

Oval ID:	oval:org.mitre.oval:def:10330
Title:	Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.
Description:	Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0883	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

Definition Id: oval:org.mitre.oval:def:10360

Oval ID:	oval:org.mitre.oval:def:10360
Title:	The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
Description:	The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0949	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

Definition Id: oval:org.mitre.oval:def:10556

Oval ID:	oval:org.mitre.oval:def:10556
Title:	The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
Description:	The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0177	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL AND kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL AND kernel is earlier than 0:2.4.21-27.0.4.EL AND kernel-source is earlier than 0:2.4.21-27.0.4.EL AND kernel-doc is earlier than 0:2.4.21-27.0.4.EL AND kernel-smp is earlier than 0:2.4.21-27.0.4.EL

Definition Id: oval:org.mitre.oval:def:10665

Oval ID:	oval:org.mitre.oval:def:10665
Title:	Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Description:	Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0685	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

Definition Id: oval:org.mitre.oval:def:11195

Oval ID:	oval:org.mitre.oval:def:11195
Title:	The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
Description:	The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-1072	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

Definition Id: oval:org.mitre.oval:def:11384

Oval ID:	oval:org.mitre.oval:def:11384
Title:	A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
Description:	A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-1068	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

Definition Id: oval:org.mitre.oval:def:11503

Oval ID:	oval:org.mitre.oval:def:11503
Title:	The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
Description:	The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-1073	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL AND kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL AND kernel is earlier than 0:2.4.21-27.0.4.EL AND kernel-source is earlier than 0:2.4.21-27.0.4.EL AND kernel-doc is earlier than 0:2.4.21-27.0.4.EL AND kernel-smp is earlier than 0:2.4.21-27.0.4.EL

Definition Id: oval:org.mitre.oval:def:18892

Oval ID:	oval:org.mitre.oval:def:18892
Title:	DSA-1286-1 linux-2.6
Description:	Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1286-1 CVE-2007-0005 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592 CVE-2004-1073	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	linux-2.6
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND linux-2.6 DPKG is earlier than 2.6.18.dfsg.1-12etch1

Definition Id: oval:org.mitre.oval:def:9450

Oval ID:	oval:org.mitre.oval:def:9450
Title:	The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
Description:	The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-1070	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

Definition Id: oval:org.mitre.oval:def:9917

Oval ID:	oval:org.mitre.oval:def:9917
Title:	The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
Description:	The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-1071	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL AND kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL AND kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL AND kernel is earlier than 0:2.4.21-20.0.1.EL AND kernel-source is earlier than 0:2.4.21-20.0.1.EL AND kernel-doc is earlier than 0:2.4.21-20.0.1.EL AND kernel-smp is earlier than 0:2.4.21-20.0.1.EL

CPE : Common Platform Enumeration

Type	Description	Count
Os	Linux Linux Kernel cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:::::: cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.8:::::::* cpe:2.3:o:linux:linux_kernel:2.6.7:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.6:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.5:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.4:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.3:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.2:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.1:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test2:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test1:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test11:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test6:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test4:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test8:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test10:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test9:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test5:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test7:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test3:::::: cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:::::::* cpe:2.3:o:linux:linux_kernel:2.5.9:::::::* cpe:2.3:o:linux:linux_kernel:2.5.8:::::::* cpe:2.3:o:linux:linux_kernel:2.5.7:::::::* cpe:2.3:o:linux:linux_kernel:2.5.69:::::::* cpe:2.3:o:linux:linux_kernel:2.5.68:::::::* cpe:2.3:o:linux:linux_kernel:2.5.67:::::::* cpe:2.3:o:linux:linux_kernel:2.5.66:::::::* cpe:2.3:o:linux:linux_kernel:2.5.65:::::::* cpe:2.3:o:linux:linux_kernel:2.5.64:::::::* cpe:2.3:o:linux:linux_kernel:2.5.63:::::::* cpe:2.3:o:linux:linux_kernel:2.5.62:::::::* cpe:2.3:o:linux:linux_kernel:2.5.61:::::::* cpe:2.3:o:linux:linux_kernel:2.5.60:::::::* cpe:2.3:o:linux:linux_kernel:2.5.6:::::::* cpe:2.3:o:linux:linux_kernel:2.5.59:::::::* cpe:2.3:o:linux:linux_kernel:2.5.58:::::::* cpe:2.3:o:linux:linux_kernel:2.5.57:::::::* cpe:2.3:o:linux:linux_kernel:2.5.56:::::::* cpe:2.3:o:linux:linux_kernel:2.5.55:::::::* cpe:2.3:o:linux:linux_kernel:2.5.54:::::::* cpe:2.3:o:linux:linux_kernel:2.5.53:::::::* cpe:2.3:o:linux:linux_kernel:2.5.52:::::::* cpe:2.3:o:linux:linux_kernel:2.5.51:::::::* cpe:2.3:o:linux:linux_kernel:2.5.50:::::::* cpe:2.3:o:linux:linux_kernel:2.5.5:::::::* cpe:2.3:o:linux:linux_kernel:2.5.49:::::::* cpe:2.3:o:linux:linux_kernel:2.5.48:::::::* cpe:2.3:o:linux:linux_kernel:2.5.47:::::::* cpe:2.3:o:linux:linux_kernel:2.5.46:::::::* cpe:2.3:o:linux:linux_kernel:2.5.45:::::::* cpe:2.3:o:linux:linux_kernel:2.5.44:::::::* cpe:2.3:o:linux:linux_kernel:2.5.43:::::::* cpe:2.3:o:linux:linux_kernel:2.5.42:::::::* cpe:2.3:o:linux:linux_kernel:2.5.41:::::::* cpe:2.3:o:linux:linux_kernel:2.5.40:::::::* cpe:2.3:o:linux:linux_kernel:2.5.4:::::::* cpe:2.3:o:linux:linux_kernel:2.5.39:::::::* cpe:2.3:o:linux:linux_kernel:2.5.38:::::::* cpe:2.3:o:linux:linux_kernel:2.5.37:::::::* cpe:2.3:o:linux:linux_kernel:2.5.36:::::::* cpe:2.3:o:linux:linux_kernel:2.5.35:::::::* cpe:2.3:o:linux:linux_kernel:2.5.34:::::::* cpe:2.3:o:linux:linux_kernel:2.5.33:::::::* cpe:2.3:o:linux:linux_kernel:2.5.32:::::::* cpe:2.3:o:linux:linux_kernel:2.5.31:::::::* cpe:2.3:o:linux:linux_kernel:2.5.30:::::::* cpe:2.3:o:linux:linux_kernel:2.5.3:::::::* cpe:2.3:o:linux:linux_kernel:2.5.29:::::::* cpe:2.3:o:linux:linux_kernel:2.5.28:::::::* cpe:2.3:o:linux:linux_kernel:2.5.27:::::::* cpe:2.3:o:linux:linux_kernel:2.5.26:::::::* cpe:2.3:o:linux:linux_kernel:2.5.25:::::::* cpe:2.3:o:linux:linux_kernel:2.5.24:::::::* cpe:2.3:o:linux:linux_kernel:2.5.23:::::::* cpe:2.3:o:linux:linux_kernel:2.5.22:::::::* cpe:2.3:o:linux:linux_kernel:2.5.21:::::::* cpe:2.3:o:linux:linux_kernel:2.5.20:::::::* cpe:2.3:o:linux:linux_kernel:2.5.2:::::::* cpe:2.3:o:linux:linux_kernel:2.5.19:::::::* cpe:2.3:o:linux:linux_kernel:2.5.18:::::::* cpe:2.3:o:linux:linux_kernel:2.5.17:::::::* cpe:2.3:o:linux:linux_kernel:2.5.16:::::::* cpe:2.3:o:linux:linux_kernel:2.5.15:::::::* cpe:2.3:o:linux:linux_kernel:2.5.14:::::::* cpe:2.3:o:linux:linux_kernel:2.5.13:::::::* cpe:2.3:o:linux:linux_kernel:2.5.12:::::::* cpe:2.3:o:linux:linux_kernel:2.5.11:::::::* cpe:2.3:o:linux:linux_kernel:2.5.10:::::::* cpe:2.3:o:linux:linux_kernel:2.5.1:::::::* cpe:2.3:o:linux:linux_kernel:2.5.0:::::::* cpe:2.3:o:linux:linux_kernel:2.4.9:::::::* cpe:2.3:o:linux:linux_kernel:2.4.8:::::::* cpe:2.3:o:linux:linux_kernel:2.4.7:::::::* cpe:2.3:o:linux:linux_kernel:2.4.6:::::::* cpe:2.3:o:linux:linux_kernel:2.4.5:::::::* cpe:2.3:o:linux:linux_kernel:2.4.4:::::::* cpe:2.3:o:linux:linux_kernel:2.4.3:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:::::: cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:::::: cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:::::: cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:::::: cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:::::: cpe:2.3:o:linux:linux_kernel:2.4.27:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.26:::::::* cpe:2.3:o:linux:linux_kernel:2.4.25:::::::* cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:::::::* cpe:2.3:o:linux:linux_kernel:2.4.24:::::::* cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:::::::* cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:::::: cpe:2.3:o:linux:linux_kernel:2.4.23:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.22:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:::::: cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:::::: cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:::::: cpe:2.3:o:linux:linux_kernel:2.4.21:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.20:::::::* cpe:2.3:o:linux:linux_kernel:2.4.2:::::::* cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:::::: cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:::::: cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:::::: cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:::::: cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:::::: cpe:2.3:o:linux:linux_kernel:2.4.19:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:::::: cpe:2.3:o:linux:linux_kernel:2.4.18::x86::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:::::: cpe:2.3:o:linux:linux_kernel:2.4.17:::::::* cpe:2.3:o:linux:linux_kernel:2.4.16:::::::* cpe:2.3:o:linux:linux_kernel:2.4.15:::::::* cpe:2.3:o:linux:linux_kernel:2.4.14:::::::* cpe:2.3:o:linux:linux_kernel:2.4.13:::::::* cpe:2.3:o:linux:linux_kernel:2.4.12:::::::* cpe:2.3:o:linux:linux_kernel:2.4.11:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.10:::::::* cpe:2.3:o:linux:linux_kernel:2.4.1:::::::* cpe:2.3:o:linux:linux_kernel:2.4.0:-:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test3:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test8:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test10:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test1:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test12:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test2:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test4:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test6:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test7:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test9:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test11:::::: cpe:2.3:o:linux:linux_kernel:2.4.0:test5:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:::::: cpe:2.3:o:linux:linux_kernel:2.3.99:-:::::: cpe:2.3:o:linux:linux_kernel:2.3.0:::::::* cpe:2.3:o:linux:linux_kernel:2.2.9:::::::* cpe:2.3:o:linux:linux_kernel:2.2.8:::::::* cpe:2.3:o:linux:linux_kernel:2.2.7:::::::* cpe:2.3:o:linux:linux_kernel:2.2.6:::::::* cpe:2.3:o:linux:linux_kernel:2.2.5:::::::* cpe:2.3:o:linux:linux_kernel:2.2.4:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.3:::::::* cpe:2.3:o:linux:linux_kernel:2.2.25:::::::* cpe:2.3:o:linux:linux_kernel:2.2.24:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.23:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.22:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.21:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.20:::::::* cpe:2.3:o:linux:linux_kernel:2.2.2:::::::* cpe:2.3:o:linux:linux_kernel:2.2.19:::::::* cpe:2.3:o:linux:linux_kernel:2.2.18:::::::* cpe:2.3:o:linux:linux_kernel:2.2.17:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.16:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:::::: cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:::::::* cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:::::: cpe:2.3:o:linux:linux_kernel:2.2.15:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.14:::::::* cpe:2.3:o:linux:linux_kernel:2.2.13:-:::::: cpe:2.3:o:linux:linux_kernel:2.2.12:::::::* cpe:2.3:o:linux:linux_kernel:2.2.11:::::::* cpe:2.3:o:linux:linux_kernel:2.2.10:::::::* cpe:2.3:o:linux:linux_kernel:2.2.1:::::::* cpe:2.3:o:linux:linux_kernel:2.2.0:::::::*	203
Os	Redhat Enterprise Linux cpe:2.3:o:redhat:enterprise_linux:3.0::advanced_servers::::: cpe:2.3:o:redhat:enterprise_linux:3.0::enterprise_server::::: cpe:2.3:o:redhat:enterprise_linux:3.0::workstation::::: cpe:2.3:o:redhat:enterprise_linux:3.0::workstation_server::::: cpe:2.3:o:redhat:enterprise_linux:3.0::advanced_server::::: cpe:2.3:o:redhat:enterprise_linux:2.1::advanced_server::::: cpe:2.3:o:redhat:enterprise_linux:2.1::workstation::::: cpe:2.3:o:redhat:enterprise_linux:2.1::workstation_ia64::::: cpe:2.3:o:redhat:enterprise_linux:2.1::advanced_server_ia64::::: cpe:2.3:o:redhat:enterprise_linux:2.1::enterprise_server::::: cpe:2.3:o:redhat:enterprise_linux:2.1::enterprise_server_ia64:::::	11
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:::::::*	1
Os	Redhat Fedora Core cpe:2.3:o:redhat:fedora_core:core_3.0:::::::* cpe:2.3:o:redhat:fedora_core:core_2.0:::::::*	2
Os	Redhat Linux Advanced Workstation cpe:2.3:o:redhat:linux_advanced_workstation:2.1::itanium_processor::::: cpe:2.3:o:redhat:linux_advanced_workstation:2.1::ia64:::::	2
Os	Sgi Irix cpe:2.3:o:sgi:irix:6.5.25:::::::* cpe:2.3:o:sgi:irix:6.5.24:::::::* cpe:2.3:o:sgi:irix:6.5.23:::::::* cpe:2.3:o:sgi:irix:6.5.22:::::::* cpe:2.3:o:sgi:irix:6.5.21m:::::::* cpe:2.3:o:sgi:irix:6.5.21f:::::::* cpe:2.3:o:sgi:irix:6.5.20m:::::::* cpe:2.3:o:sgi:irix:6.5.20f:::::::*	8
Os	Suse Suse Linux cpe:2.3:o:suse:suse_linux:9.2:::::::* cpe:2.3:o:suse:suse_linux:9.1:::::::* cpe:2.3:o:suse:suse_linux:9.0::enterprise_server::::: cpe:2.3:o:suse:suse_linux:9.0:::::::* cpe:2.3:o:suse:suse_linux:9.0::x86_64::::: cpe:2.3:o:suse:suse_linux:8.2:::::::* cpe:2.3:o:suse:suse_linux:8.1:::::::* cpe:2.3:o:suse:suse_linux:8::enterprise_server::::: cpe:2.3:o:suse:suse_linux:1.0::desktop:::::	9
Os	Trustix Secure Linux cpe:2.3:o:trustix:secure_linux:2.2:::::::* cpe:2.3:o:trustix:secure_linux:2.1:::::::* cpe:2.3:o:trustix:secure_linux:2.0:::::::* cpe:2.3:o:trustix:secure_linux:1.5:::::::*	4
Os	Turbolinux Turbolinux Server cpe:2.3:o:turbolinux:turbolinux_server:10.0:::::::*	1
Os	Ubuntu Ubuntu Linux cpe:2.3:o:ubuntu:ubuntu_linux:4.1::ia64::::: cpe:2.3:o:ubuntu:ubuntu_linux:4.1::ppc:::::	2

OpenVAS Exploits

Date	Description
2009-10-10	Name : SLES9: Security update for Linux kernel File : nvt/sles9p5019053.nasl
2009-10-10	Name : SLES9: Security update for Linux kernel File : nvt/sles9p5010817.nasl
2009-04-09	Name : Mandriva Update for kernel MDKSA-2007:078 (kernel) File : nvt/gb_mandriva_MDKSA_2007_078.nasl
2009-04-09	Name : Mandriva Update for kernel MDKSA-2007:060 (kernel) File : nvt/gb_mandriva_MDKSA_2007_060.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200408-24 (Kernel) File : nvt/glsa_200408_24.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200407-02 (Kernel) File : nvt/glsa_200407_02.nasl
2008-01-17	Name : Debian Security Advisory DSA 482-1 (kernel) File : nvt/deb_482_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 495-1 (kernel) File : nvt/deb_495_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 491-1 (kernel-source-2.4.19 kernel-patch-2.4.19-... File : nvt/deb_491_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 489-1 (kernel-source-2.4.17 kernel-patch-2.4.17-... File : nvt/deb_489_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1067-1 (kernel 2.4.16) File : nvt/deb_1067_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 481-1 (kernel-image-2.4.17-ia64) File : nvt/deb_481_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 480-1 (kernel-image-2.4.17-hppa kernel-image-2.4... File : nvt/deb_480_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 479-2 (kernel-image-2.4.18-1-i386) File : nvt/deb_479_2.nasl
2008-01-17	Name : Debian Security Advisory DSA 479-1 (kernel) File : nvt/deb_479_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1304-1 (kernel-source-2.6.8) File : nvt/deb_1304_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1286-1 (linux-2.6) File : nvt/deb_1286_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1082-1 (kernel-2.4.17) File : nvt/deb_1082_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1070-1 (kernel-source-2.4.19,kernel-image-sparc-... File : nvt/deb_1070_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
11996	Linux Kernel unix_dgram_recvmsg() Local Privilege Escalation
11985	Linux Kernel smb Filesystem smb_receive_trans2 Arbitrary Memory Disclosure
11984	Linux Kernel smb Filesystem smb_proc_readX_data DoS
11983	Linux Kernel smb Filesystem smb_receive_trans2 Overflow
11982	Linux Kernel smb Filesystem smb_proc_readX Arbitrary Memory Disclosure
11981	Linux Kernel smb Filesystem smb_proc_read(X) Overflow
11600	Linux Kernel ELF Binary Loader open_exec() Binary Read Permission Error
11599	Linux Kernel ELF Binary Loader Interpreter Name String Parsing Issue
11598	Linux Kernel ELF Binary Loader mmap() Failure Handling Issue The ELF binary loader in the Linux kernel contains a flaw that may allow a malicious user to manipulate the system into loading a binary into memory incorrectly. The issue is triggered when the mmap() function fails. It is possible that the flaw may allow the attacker to supply an arbitrary memory layout for the binary, resulting in a loss of integrity.
11597	Linux Kernel ELF Binary Loader Bad Return Value Issue The ELF binary loader in the Linux kernel contains a flaw that may allow a malicious user to manipulate the system into returning a smaller value than requested when filling kernel buffers. The issue is triggered when the kernel_read() function returns a positive but smaller value than requested. It is possible that the flaw may allow the attacker to supply an arbitrary memory layout for the binary, resulting in a loss of integrity.
9273	Linux Kernel USB Structure Kernel Memory Disclosure
7123	IRIX mapelf32exec Function Local DoS IRIX contains a flaw that may allow a local denial of service. The issue is triggered when a mapelf32exec() call is made on a malicious binary, and will result in loss of availability for the platform.
7122	IRIX syssgi Privilege Escalation IRIX contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a local attacker reads and writes kernel memory via "SGI_IOPROBE" requests in the "syssgi()" system call. This flaw may allow a local attacker to gain root privileges, resulting in a loss of confidentiality and integrity.
5363	Linux Kernel ext3 File Systems Information Leak The Linux kernel contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the kernel does not properly initialize the journal descriptor blocks, which will disclose information stored in kernel memory to the ext3 file system device, resulting in a loss of confidentiality.

Snort® IPS/IDS

Date	Description
2014-01-10	SMB client TRANS response ring0 remote code execution attempt RuleID : 16531 - Revision : 11 - Type : NETBIOS

Nessus® Vulnerability Scanner

Date	Description
2007-06-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1304.nasl - Type : ACT_GATHER_INFO
2007-05-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1286.nasl - Type : ACT_GATHER_INFO
2007-04-05	Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2007-078.nasl - Type : ACT_GATHER_INFO
2007-03-12	Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2007-060.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1067.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1069.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1070.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1082.nasl - Type : ACT_GATHER_INFO
2006-07-05	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2005-293.nasl - Type : ACT_GATHER_INFO
2006-02-05	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2006-0191.nasl - Type : ACT_GATHER_INFO
2006-01-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-60-0.nasl - Type : ACT_GATHER_INFO
2006-01-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-38-1.nasl - Type : ACT_GATHER_INFO
2006-01-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-30-1.nasl - Type : ACT_GATHER_INFO
2005-04-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2005-293.nasl - Type : ACT_GATHER_INFO
2005-02-03	Name : The remote host is missing a vendor-supplied security patch File : suse_SA_2004_044.nasl - Type : ACT_GATHER_INFO
2005-01-26	Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2005-022.nasl - Type : ACT_GATHER_INFO
2005-01-04	Name : The remote Fedora Core host is missing a security update. File : fedora_2004-581.nasl - Type : ACT_GATHER_INFO
2005-01-04	Name : The remote Fedora Core host is missing a security update. File : fedora_2004-582.nasl - Type : ACT_GATHER_INFO
2004-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2004-505.nasl - Type : ACT_GATHER_INFO
2004-12-13	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2004-537.nasl - Type : ACT_GATHER_INFO
2004-12-13	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2004-549.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-491.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-489.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-495.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-482.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-481.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-480.nasl - Type : ACT_GATHER_INFO
2004-09-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-479.nasl - Type : ACT_GATHER_INFO
2004-08-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200408-24.nasl - Type : ACT_GATHER_INFO
2004-08-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200407-02.nasl - Type : ACT_GATHER_INFO
2004-07-31	Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2004-029.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:48:42	Multiple Updates
2013-05-11 12:22:39	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	10
CPE ID(s)	243
osvdb(s)	14
Openvas Exploit(s)	19
Snort® Rule(s)	1
Nessus® Exploit(s)	31

	Related
10	RHSA-2005:016
7.5	RHSA-2004:044
7.2	CVE-2004-1072
7.2	CVE-2004-1071
7.2	CVE-2004-1070
6.4	CVE-2004-0949
6.4	CVE-2004-0883
6.2	CVE-2004-1068
5	CVE-2004-0177
4.6	CVE-2004-0685
2.1	CVE-2004-1073
2.1	CVE-2004-0136
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 12 more Alert(s)

7.2 - RHSA-2004:505

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU