Detections
Analytics
Fedora 12 : ircd-hybrid-7.2.3-11.fc12 / ircd-ratbox-2.2.8-7.fc12 (2010-9312)
medium Nessus Plugin ID 47529
Language:
Synopsis
The remote Fedora host is missing one or more security updates.Description
Two vulnerabilities were reported in ircd-hybrid, ircd-ratbox, and oftc-hybrid. The first is an integer overflow that can lead to a denial of service or, possibly, the execution of arbitrary code on the ircd server (CVE-2009-4016 (patch [1])), the second is a NULL pointer dereference that can lead to a denial of service of the ircd server (CVE-2010-0300 (patch [2])). This has been corrected in upstream ircd-ratbox 2.2.9 [3]. CVE-2010-0300 may be ircd- ratbox specific, however CVE-2009-4016 affects both ircd servers. [1] http://ircd.ratbox.org/cgi-bin/index.cgi/ircd- ratbox/branches/RATBOX_3_0/src/cache.c?r1=26334&r2=26732 [2] http://trac.oftc.net/projects/oftc-hybrid/changeset/1062 [3] http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.htmlNote that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected ircd-hybrid and / or ircd-ratbox packages.See Also
http://ircd.ratbox.org/cgi-bin/index.cgi/ircd-
https://bugzilla.redhat.com/show_bug.cgi?id=559382
http://trac.oftc.net/projects/oftc-hybrid/changeset/1062
http://www.nessus.org/u?355bb8f4
Plugin Details
Severity: Medium
ID: 47529
File Name: fedora_2010-9312.nasl
Version: 1.14
Type: Local
Agent: unix
Family: Fedora Local Security Checks
Published: 7/1/2010
Updated: 1/11/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.12
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:fedoraproject:fedora:12, p-cpe:/a:fedoraproject:fedora:ircd-hybrid, p-cpe:/a:fedoraproject:fedora:ircd-ratbox
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 5/31/2010
Reference Information
CVE: CVE-2009-4016, CVE-2010-0300