Mandrake Linux Security Advisory : kernel (MDKSA-2004:029)

This script is Copyright (C) 2004-2013 Tenable Network Security, Inc.


Synopsis :

The remote Mandrake Linux host is missing one or more security
updates.

Description :

A vulnerability was found in the R128 DRI driver by Alan Cox. This
could allow local privilege escalation. The previous fix, in
MDKSA-2004:015 only partially corrected the problem; the full fix is
included (CVE-2004-0003).

A local root vulnerability was discovered in the isofs component of
the Linux kernel by iDefense. This vulnerability can be triggered by
performing a directory listing on a maliciously constructed ISO
filesystem, or attempting to access a file via a malformed symlink on
such a filesystem (CVE-2004-0109).

An information leak was discovered in the ext3 filesystem code by
Solar Designer. It was discovered that when creating or writing to an
ext3 filesystem, some amount of other in-memory data gets written to
the device. The data is not the file's contents, not something on the
same filesystem, or even anything that was previously in a file at
all. To obtain this data, a user needs to read the raw device
(CVE-2004-0177).

The same vulnerability was also found in the XFS filesystem code
(CVE-2004-0133) and the JFS filesystem code (CVE-2004-0181).

Finally, a vulnerability in the OSS code for SoundBlaster 16 devices
was discovered by Andreas Kies. It is possible for local users with
access to the sound system to crash the machine (CVE-2004-0178).

The provided packages are patched to fix these vulnerabilities. All
users are encouraged to upgrade to these updated kernels.

To update your kernel, please follow the directions located at :

http://www.mandrakesecure.net/en/kernelupdate.php

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Family: Mandriva Local Security Checks

Nessus Plugin ID: 14128 (mandrake_MDKSA-2004-029.nasl)

Bugtraq ID:

CVE ID: CVE-2004-0003
CVE-2004-0109
CVE-2004-0133
CVE-2004-0177
CVE-2004-0178
CVE-2004-0181

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now