RHEL 4 / 5 : sblim (RHSA-2008:0497)

medium Nessus Plugin ID 33248

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

SBLIM stands for Standards-Based Linux Instrumentation for Manageability. It consists of a set of standards-based, Web-Based Enterprise Management (WBEM) modules that use the Common Information Model (CIM) standard to gather and provide systems management information, events, and methods to local or networked consumers via a CIM object services broker using the CMPI (Common Manageability Programming Interface) standard. This package provides a set of core providers and development tools for systems management applications.

It was discovered that certain sblim libraries had an RPATH (runtime library search path) set in the ELF (Executable and Linking Format) header. This RPATH pointed to a sub-directory of a world-writable, temporary directory. A local user could create a file with the same name as a library required by sblim (such as libc.so) and place it in the directory defined in the RPATH. This file could then execute arbitrary code with the privileges of the user running an application that used sblim (eg tog-pegasus). (CVE-2008-1951)

Users are advised to upgrade to these updated sblim packages, which resolve this issue.

Solution

Update the affected packages.

See Also

https://access.redhat.com/security/cve/cve-2008-1951

https://access.redhat.com/errata/RHSA-2008:0497

Plugin Details

Severity: Medium

ID: 33248

File Name: redhat-RHSA-2008-0497.nasl

Version: 1.25

Type: local

Agent: unix

Published: 6/24/2008

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:sblim-cim-client, p-cpe:/a:redhat:enterprise_linux:sblim-cim-client-javadoc, p-cpe:/a:redhat:enterprise_linux:sblim-cim-client-manual, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-base, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-base-devel, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-base-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-devel, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-dns, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-dns-devel, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-dns-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-fsvol, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-fsvol-devel, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-fsvol-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-network, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-network-devel, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-network-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-nfsv3, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-nfsv3-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-nfsv4, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-nfsv4-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-params, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-params-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-samba, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-samba-devel, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-samba-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-sysfs, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-sysfs-test, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-syslog, p-cpe:/a:redhat:enterprise_linux:sblim-cmpi-syslog-test, p-cpe:/a:redhat:enterprise_linux:sblim-gather, p-cpe:/a:redhat:enterprise_linux:sblim-gather-devel, p-cpe:/a:redhat:enterprise_linux:sblim-gather-provider, p-cpe:/a:redhat:enterprise_linux:sblim-gather-test, p-cpe:/a:redhat:enterprise_linux:sblim-testsuite, p-cpe:/a:redhat:enterprise_linux:sblim-tools-libra, p-cpe:/a:redhat:enterprise_linux:sblim-tools-libra-devel, p-cpe:/a:redhat:enterprise_linux:sblim-wbemcli, cpe:/o:redhat:enterprise_linux:4, cpe:/o:redhat:enterprise_linux:4.6, cpe:/o:redhat:enterprise_linux:5, cpe:/o:redhat:enterprise_linux:5.2

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 6/24/2008

Vulnerability Publication Date: 6/25/2008

Reference Information

CVE: CVE-2008-1951

CWE: 264

RHSA: 2008:0497