Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Medium Nessus Plugin ID 60209


The remote Scientific Linux host is missing one or more security updates.


a flaw in the mount handling routine for 64-bit systems that allowed a local user to cause denial of service (CVE-2006-7203, Important).

a flaw in the PPP over Ethernet implementation that allowed a remote user to cause a denial of service (CVE-2007-2525, Important).

a flaw in the Bluetooth subsystem that allowed a local user to trigger an information leak (CVE-2007-1353, Low).

a bug in the random number generator that prevented the manual seeding of the entropy pool (CVE-2007-2453, Low).

In addition to the security issues described above, fixes for the following have been included :

- a race condition between ext3_link/unlink that could create an orphan inode list corruption.

- a bug in the e1000 driver that could lead to a watchdog timeout panic.


Update the affected packages.

See Also

Plugin Details

Severity: Medium

ID: 60209

File Name: sl_20070614_kernel_on_SL5_x.nasl

Version: $Revision: 1.1 $

Type: local

Agent: unix

Published: 2012/08/01

Modified: 2012/08/01

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2007/06/14

Reference Information

CVE: CVE-2006-7203, CVE-2007-1353, CVE-2007-2453, CVE-2007-2525