SuSE 10 Security Update : the debug kernel (ZYPP Patch Number 6778)

This script is Copyright (C) 2012-2016 Tenable Network Security, Inc.


Synopsis :

The remote SuSE 10 host is missing a security-related patch.

Description :

This update fixes various bugs and some security issues in the SUSE
Linux Enterprise 10 SP 3 kernel.

The following security issues were fixed :

- drivers/net/e1000/e1000_main.c in the e1000 driver in
the Linux kernel handles Ethernet frames that exceed the
MTU by processing certain trailing payload data as if it
were a complete frame, which allows remote attackers to
bypass packet filters via a large packet with a crafted
payload. (CVE-2009-4536)

- drivers/net/e1000e/netdev.c in the e1000e driver in the
Linux kernel does not properly check the size of an
Ethernet frame that exceeds the MTU, which allows remote
attackers to have an unspecified impact via crafted
packets. (CVE-2009-4538)

- Missing CAP_NET_ADMIN checks in the ebtables netfilter
code might have allowed local attackers to modify bridge
firewall settings. (CVE-2010-0007)

See also :

http://support.novell.com/security/cve/CVE-2009-4536.html
http://support.novell.com/security/cve/CVE-2009-4538.html
http://support.novell.com/security/cve/CVE-2010-0007.html

Solution :

Apply ZYPP patch number 6778.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Family: SuSE Local Security Checks

Nessus Plugin ID: 59144 ()

Bugtraq ID:

CVE ID: CVE-2009-4536
CVE-2009-4538
CVE-2010-0007

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now