CentOS 4 : sblim (CESA-2008:0497)

medium Nessus Plugin ID 33258

Synopsis

The remote CentOS host is missing one or more security updates.

Description

Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

SBLIM stands for Standards-Based Linux Instrumentation for Manageability. It consists of a set of standards-based, Web-Based Enterprise Management (WBEM) modules that use the Common Information Model (CIM) standard to gather and provide systems management information, events, and methods to local or networked consumers via a CIM object services broker using the CMPI (Common Manageability Programming Interface) standard. This package provides a set of core providers and development tools for systems management applications.

It was discovered that certain sblim libraries had an RPATH (runtime library search path) set in the ELF (Executable and Linking Format) header. This RPATH pointed to a sub-directory of a world-writable, temporary directory. A local user could create a file with the same name as a library required by sblim (such as libc.so) and place it in the directory defined in the RPATH. This file could then execute arbitrary code with the privileges of the user running an application that used sblim (eg tog-pegasus). (CVE-2008-1951)

Users are advised to upgrade to these updated sblim packages, which resolve this issue.

Solution

Update the affected sblim packages.

Plugin Details

Severity: Medium

ID: 33258

File Name: centos_RHSA-2008-0497.nasl

Version: 1.14

Type: local

Agent: unix

Family: CentOS Local Security Checks

Published: 6/26/2008

Updated: 1/4/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:centos:centos:sblim-wbemcli, p-cpe:/a:centos:centos:sblim-gather-devel, p-cpe:/a:centos:centos:sblim-cmpi-network-devel, p-cpe:/a:centos:centos:sblim-gather, p-cpe:/a:centos:centos:sblim-cmpi-syslog, p-cpe:/a:centos:centos:sblim-gather-test, p-cpe:/a:centos:centos:sblim-cmpi-devel, p-cpe:/a:centos:centos:sblim-cmpi-fsvol, p-cpe:/a:centos:centos:sblim-cmpi-nfsv3, p-cpe:/a:centos:centos:sblim-cmpi-nfsv3-test, p-cpe:/a:centos:centos:sblim-cmpi-nfsv4, p-cpe:/a:centos:centos:sblim-cmpi-fsvol-devel, p-cpe:/a:centos:centos:sblim-cmpi-fsvol-test, p-cpe:/a:centos:centos:sblim-cmpi-network, p-cpe:/a:centos:centos:sblim-gather-provider, p-cpe:/a:centos:centos:sblim-testsuite, p-cpe:/a:centos:centos:sblim-cmpi-syslog-test, p-cpe:/a:centos:centos:sblim-cmpi-network-test, p-cpe:/a:centos:centos:sblim-cmpi-nfsv4-test, p-cpe:/a:centos:centos:sblim-cmpi-params-test, p-cpe:/a:centos:centos:sblim-cmpi-base-test, p-cpe:/a:centos:centos:sblim-cmpi-base, p-cpe:/a:centos:centos:sblim-cmpi-sysfs, p-cpe:/a:centos:centos:sblim-cmpi-base-devel, p-cpe:/a:centos:centos:sblim-cmpi-sysfs-test, p-cpe:/a:centos:centos:sblim-cmpi-params, cpe:/o:centos:centos:4

Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list

Patch Publication Date: 6/24/2008

Vulnerability Publication Date: 6/25/2008

Reference Information

CVE: CVE-2008-1951

CWE: 264

RHSA: 2008:0497

Detections

Analytics