Detections
Analytics

RHEL 2.1 / 3 : kdenetwork (RHSA-2005:175)

medium Nessus Plugin ID 17265

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated kdenetwork packages that fix a file descriptor leak are now available.

This update has been rated as having low security impact by the Red Hat Security Response Team

The kdenetwork packages contain a collection of networking applications for the K Desktop Environment.

A bug was found in the way kppp handles privileged file descriptors. A malicious local user could make use of this flaw to modify the /etc/hosts or /etc/resolv.conf files, which could be used to spoof domain information. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0205 to this issue.

Please note that the default installation of kppp on Red Hat Enterprise Linux uses consolehelper and is not vulnerable to this issue. However, the kppp FAQ provides instructions for removing consolehelper and running kppp suid root, which is a vulnerable configuration.

Users of kdenetwork should upgrade to these updated packages, which contain a backported patch, and are not vulnerable to this issue.

Solution

Update the affected kdenetwork, kdenetwork-devel and / or kdenetwork-ppp packages.

See Also

https://access.redhat.com/errata/RHSA-2005:175

https://access.redhat.com/security/cve/cve-2005-0205

Plugin Details

Severity: Medium

ID: 17265

File Name: redhat-RHSA-2005-175.nasl

Version: 1.24

Type: Local

Agent: unix

Published: 3/4/2005

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.04

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:3, p-cpe:/a:redhat:enterprise_linux:kdenetwork-ppp, p-cpe:/a:redhat:enterprise_linux:kdenetwork, p-cpe:/a:redhat:enterprise_linux:kdenetwork-devel, cpe:/o:redhat:enterprise_linux:2.1

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 3/3/2005

Vulnerability Publication Date: 5/2/2005

Reference Information

CVE: CVE-2005-0205

RHSA: 2005:175