Mandrake Linux Security Advisory : sysklogd (MDKSA-2004:038)

high Nessus Plugin ID 14137

Synopsis

The remote Mandrake Linux host is missing a security update.

Description

Steve Grubb discovered a bug in sysklogd where it allocates an insufficient amount of memory which causes sysklogd to write to unallocated memory. This could allow for a malicious user to crash sysklogd.

The updated packages provide a patched sysklogd using patches from Openwall to correct the problem and also corrects the use of an unitialized variable (a previous use of 'count').

Solution

Update the affected sysklogd package.

Plugin Details

Severity: High

ID: 14137

File Name: mandrake_MDKSA-2004-038.nasl

Version: 1.16

Type: local

Published: 7/31/2004

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:sysklogd, cpe:/o:mandrakesoft:mandrake_linux:10.0, cpe:/o:mandrakesoft:mandrake_linux:9.1, cpe:/o:mandrakesoft:mandrake_linux:9.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 4/28/2004

Reference Information

MDKSA: 2004:038