Slackware 9.1 / current : kernel security updates (SSA:2004-119-01)

This script is Copyright (C) 2005-2013 Tenable Network Security, Inc.


Synopsis :

The remote Slackware host is missing a security update.

Description :

New kernel packages are available for Slackware 9.1 and -current to
fix security issues. Also available are new kernel modules packages
(including alsa-driver), and a new version of the hotplug package for
Slackware 9.1 containing some fixes for using 2.4.26 (and 2.6.x)
kernel modules. The most serious of the fixed issues is an overflow in
ip_setsockopt(), which could allow a local attacker to gain root
access, or to crash or reboot the machine. This bug affects 2.4
kernels from 2.4.22 - 2.4.25. Any sites running one of those kernel
versions should upgrade right away. After installing the new kernel,
be sure to run 'lilo'.

See also :

http://www.nessus.org/u?c003686f

Solution :

Update the affected packages.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)

Family: Slackware Local Security Checks

Nessus Plugin ID: 18792 ()

Bugtraq ID:

CVE ID: CVE-2004-0394
CVE-2004-0424