Detections
Analytics
Scientific Linux Security Update : coolkey on SL5.x i386/x86_64
low Nessus Plugin ID 60285
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
Steve Grubb discovered a flaw in the way coolkey created a temporary directory. A local attacker could perform a symlink attack and cause arbitrary files to be overwritten. (CVE-2007-4129)In addition, the updated packages contain fixes for the following bugs in the CAC Smart Card support :
- CAC Smart Cards can have from 1 to 3 certificates. The coolkey driver, however, was not recognizing cards if they had less than 3 certificates.
- logging into a CAC Smart Card token with a new application would cause other, already authenticated, applications to lose their login status unless the Smart Card was then removed from the reader and re-inserted
Solution
Update the affected coolkey and / or coolkey-devel packages.See Also
Plugin Details
Severity: Low
ID: 60285
File Name: sl_20071107_coolkey_on_SL5_x.nasl
Version: 1.5
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Low
Base Score: 3.3
Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:P/A:P
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 11/7/2007
Reference Information
CVE: CVE-2007-4129
CWE: 59