Fedora 12 : znc-0.090-2.fc12 (2010-10078)

Low Nessus Plugin ID 47207

Synopsis

The remote Fedora host is missing a security update.

Description

Bug 603915 - znc: NULL pointer dereference flaw leads to segfault under certain conditions A Debian bug report [1] noted that ZNC would segfault under certain conditions, such as clicking 'traffic' in the webadmin pages or issuing the traffic command on the /znc shell. This has been corrected upstream [2]. This vulnerability was reported against 0.090 which is the version that Fedora provides. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929 [2] http://znc.svn.sourceforge.net/viewvc/znc?view=rev&revision=2026

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected znc package.

See Also

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929

http://znc.svn.sourceforge.net/viewvc/znc?view=rev&revision=2026

https://bugzilla.redhat.com/show_bug.cgi?id=603915

http://www.nessus.org/u?e3d1bf0f

Plugin Details

Severity: Low

ID: 47207

File Name: fedora_2010-10078.nasl

Version: 1.10

Type: local

Agent: unix

Published: 2010/07/01

Updated: 2019/08/02

Dependencies: 12634

Risk Information

Risk Factor: Low

CVSS v2.0

Base Score: 3.5

Temporal Score: 2.9

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:N/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:znc, cpe:/o:fedoraproject:fedora:12

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/06/21

Reference Information

CVE: CVE-2010-2448

BID: 40982

FEDORA: 2010-10078