Test ID:	1.3.6.1.4.1.25623.1.0.50433
Category:	Fedora Local Security Checks
Title:	Fedora Core 3 FEDORA-2005-013 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kernel announced via advisory FEDORA-2005-013. This update rebases the kernel to match the upstream 2.6.10 release, and adds a number of security fixes by means of adding the latest -ac patch. CVE-2004-1235 Paul Starzetz from isec.pl found a problem in the binary format loaders uselib() function that could lead to potential priveledge escalation. http://isec.pl/vulnerabilities/isec-0021-uselib.txt NO-CAN-ASSIGNED Brad Spengler found several problems. - An integer overflow in the random poolsize sysctl handler. - SCSI ioctl integer overflow and information leak. - RLIMIT_MEMLOCK bypass and unprivileged user DoS. NO-CAN-ASSIGNED Coverity Inc. found a number of bugs with their automated source checker in coda, xfs, network bridging, rose network protocol, and the sdla wan driver. http://linuxbugs.coverity.com This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ 3358578123d1f533f59551e3ae57c58d SRPMS/kernel-2.6.10-1.737_FC3.src.rpm fefab702da72d80a17f288a732314f2f x86_64/kernel-2.6.10-1.737_FC3.x86_64.rpm 367a35017888dd291ae5d5e49d3d528f x86_64/kernel-smp-2.6.10-1.737_FC3.x86_64.rpm bdd8a314125cb1999b55c4f6f3cdb246 x86_64/debug/kernel-debuginfo-2.6.10-1.737_FC3.x86_64.rpm f48db7fff38c51f651364fc58443c30d x86_64/kernel-doc-2.6.10-1.737_FC3.noarch.rpm 36f98dd65ec1765c26770be7e6362a6f i386/kernel-2.6.10-1.737_FC3.i586.rpm a7122fda3dd50ac6adb24789fb6d1bba i386/kernel-smp-2.6.10-1.737_FC3.i586.rpm 415412abd0857a5789da547af0825864 i386/debug/kernel-debuginfo-2.6.10-1.737_FC3.i586.rpm 909a1a29aa29773b1d9918e2a7614844 i386/kernel-2.6.10-1.737_FC3.i686.rpm 30cd263a60bc43a502ce768c2354dc07 i386/kernel-smp-2.6.10-1.737_FC3.i686.rpm 0d19dc4ba95ca24403c8cf8aab1333d4 i386/debug/kernel-debuginfo-2.6.10-1.737_FC3.i686.rpm f48db7fff38c51f651364fc58443c30d i386/kernel-doc-2.6.10-1.737_FC3.noarch.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://fedoranews.org/blog/index.php?p=263 Risk factor : High CVSS Score: 6.2
Cross-Ref:	BugTraq ID: 12190 Common Vulnerability Exposure (CVE) ID: CVE-2004-1235 http://www.securityfocus.com/bid/12190 Bugtraq: 20050107 Linux kernel sys_uselib local root vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110512575901427&w=2 Conectiva Linux advisory: CLA-2005:930 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 Debian Security Information: DSA-1067 (Google Search) http://www.debian.org/security/2006/dsa-1067 Debian Security Information: DSA-1069 (Google Search) http://www.debian.org/security/2006/dsa-1069 Debian Security Information: DSA-1070 (Google Search) http://www.debian.org/security/2006/dsa-1070 Debian Security Information: DSA-1082 (Google Search) http://www.debian.org/security/2006/dsa-1082 http://www.securityfocus.com/advisories/7806 http://www.securityfocus.com/advisories/7805 https://bugzilla.fedora.us/show_bug.cgi?id=2336 http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 http://isec.pl/vulnerabilities/isec-0021-uselib.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9567 http://www.redhat.com/support/errata/RHSA-2005-016.html http://www.redhat.com/support/errata/RHSA-2005-017.html http://www.redhat.com/support/errata/RHSA-2005-043.html http://www.redhat.com/support/errata/RHSA-2005-092.html http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html http://www.trustix.org/errata/2005/0001/ XForce ISS Database: linux-uselib-gain-privileges(18800) https://exchange.xforce.ibmcloud.com/vulnerabilities/18800
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.