Slackware 9.1 / current : kernel security updates (SSA:2004-119-01)

This script is Copyright (C) 2005-2013 Tenable Network Security, Inc.


Synopsis :

The remote Slackware host is missing a security update.

Description :

New kernel packages are available for Slackware 9.1 and -current to
fix security issues. Also available are new kernel modules packages
(including alsa-driver), and a new version of the hotplug package for
Slackware 9.1 containing some fixes for using 2.4.26 (and 2.6.x)
kernel modules. The most serious of the fixed issues is an overflow in
ip_setsockopt(), which could allow a local attacker to gain root
access, or to crash or reboot the machine. This bug affects 2.4
kernels from 2.4.22 - 2.4.25. Any sites running one of those kernel
versions should upgrade right away. After installing the new kernel,
be sure to run 'lilo'.

See also :

http://www.nessus.org/u?c003686f

Solution :

Update the affected packages.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)

Family: Slackware Local Security Checks

Nessus Plugin ID: 18792 ()

Bugtraq ID:

CVE ID: CVE-2004-0394
CVE-2004-0424

Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial