rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.

The remote NewStart CGSL host, running version MAIN 6.02, has initscripts packages installed that are affected by a vulnerability:

  - rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to     delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.
    (CVE-2008-3524)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has initscripts packages installed that are affected by a vulnerability:

  - rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to     delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.
    (CVE-2008-3524)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update fixes an issue (CVE-2008-3524) where a malicious user could cause system files to be removed on startup. It also fixes a bug when running on pre- Fedora-9 kernels, and cleans up some extraneous error messages.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
160781	NewStart CGSL MAIN 6.02 : initscripts Vulnerability (NS-SA-2022-0069)	Nessus	NewStart CGSL Local Security Checks	medium
154594	NewStart CGSL CORE 5.04 / MAIN 5.04 : initscripts Vulnerability (NS-SA-2021-0110)	Nessus	NewStart CGSL Local Security Checks	medium
34279	Fedora 9 : initscripts-8.76.3-1 (2008-7667)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-3524

medium

Tenable Plugins

medium

medium

medium