openSUSE Security Update : xdm (openSUSE-SU-2013:1117-1)

Medium Nessus Plugin ID 75068


The remote openSUSE host is missing a security update.


xdm was updated on crypt() NULL pointer crashes :

- Starting with glibc 2.17 (eglibc 2.17), crypt() fails with EINVAL (w/ NULL return) if the salt violates specifications. Additionally, on FIPS-140 enabled Linux systems, DES/MD5-encrypted passwords passed to crypt() fail with EPERM (w/ NULL return). If using glibc's crypt(), check return value to avoid a possible NULL pointer dereference. (bnc#824884) (CVE-2013-2179)


Update the affected xdm packages.

See Also

Plugin Details

Severity: Medium

ID: 75068

File Name: openSUSE-2013-547.nasl

Version: $Revision: 1.1 $

Type: local

Agent: unix

Published: 2014/06/13

Modified: 2014/06/13

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:xdm, p-cpe:/a:novell:opensuse:xdm-debuginfo, p-cpe:/a:novell:opensuse:xdm-debugsource, cpe:/o:novell:opensuse:12.3

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2013/06/24

Reference Information

CVE: CVE-2013-2179