I  Updated ESX driver

    a. Updated aacraid driver

       This patch fixes a flaw in how the aacraid SCSI driver checked        IOCTL command permissions.  This flaw might allow a local user        on the Service Console to cause a denial of service or gain        privileges. Thanks to Adaptec for reporting this issue.

       The Common Vulnerabilities and Exposures project (cve.mitre.org)        has assigned the name CVE-2007-4308 to this issue.

II  Service Console package security updates

    a. Samba

       Alin Rad Pop of Secunia Research found a stack-based buffer overflow        flaw in the way Samba authenticates remote users.  A remote        unauthenticated user could trigger this flaw to cause the Samba        server to crash or to execute arbitrary code with the        permissions of the Samba server.

       Note: This vulnerability can be exploited only if the attacker              has access to the Service Console network.  The Samba              client is installed by default in the Service Console, but              the Samba server is not.

       The Common Vulnerabilities and Exposures project (cve.mitre.org)        has assigned the name CVE-2007-6015 to this issue.

    b. Python

       Chris Evans of the Google security research team discovered an        integer overflow issue with the way Python's Perl-Compatible        Regular Expression (PCRE) module handled certain regular        expressions.  If a Python application used the PCRE module to        compile and execute untrusted regular expressions, it might be        possible to cause the application to crash, or to execute        arbitrary code with the privileges of the Python interpreter.

       The Common Vulnerabilities and Exposures project (cve.mitre.org)        has assigned the name CVE-2006-7228 to this issue.

       Piotr Engelking discovered a flaw in Python's locale module        where strings generated by the strxfrm() function were not        properly NUL-terminated.  This might result in disclosure of        data stored in the memory of a Python application using the        strxfrm() function.

       The Common Vulnerabilities and Exposures project (cve.mitre.org)        has assigned the name CVE-2007-2052 to this issue.

       Slythers Bro reported multiple integer overflow flaws in        Python's imageop module.  These could allow an attacker to cause        a Python application to crash, enter an infinite loop, or        possibly execute arbitrary code with the privileges of the        Python interpreter.

       The Common Vulnerabilities and Exposures project (cve.mitre.org)        has assigned the name CVE-2007-4965 to this issue.

Specially crafted images could trigger an integer overflow in the imageop module. (CVE-2007-4965)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2007-009 applied. 

This update contains several security fixes for a large number of programs.

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

This release corrects several security vulnerabilities in various components shipped as part of the Red Hat Network Satellite Server Solaris client. In a typical operating environment, these components are not used by the Satellite Server in a vulnerable manner. These security updates will reduce risk should these components be used by other applications.

Two denial-of-service flaws were fixed in ZLib. (CVE-2005-2096, CVE-2005-1849)

Multiple flaws were fixed in OpenSSL. (CVE-2006-4343, CVE-2006-4339, CVE-2006-3738, CVE-2006-2940, CVE-2006-2937, CVE-2005-2969)

Multiple flaws were fixed in Python. (CVE-2007-4965, CVE-2007-2052, CVE-2006-4980, CVE-2006-1542)

Users of Red Hat Network Satellite Server 5.0.1 are advised to upgrade to 5.0.2, which resolves these issues.

Red Hat Network Satellite Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

This release corrects several security vulnerabilities in various components shipped as part of the Red Hat Network Satellite Server Solaris client. In a typical operating environment, these components are not used by the Satellite Server in a vulnerable manner. These security updates will reduce risk should these components be used by other applications.

Several flaws in Zlib was discovered. An attacker could create a carefully-crafted compressed stream that would cause an application to crash if the stream is opened by a user. (CVE-2005-2096). An attacker could create a carefully crafted compressed stream that would cause an application to crash if the stream is opened by a user.
(CVE-2005-1849)

A buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers() utility function. An attacker could send a list of ciphers to an application that used this function and overrun a buffer (CVE-2006-3738).

A flaw in the SSLv2 client code was discovered. If a client application used OpenSSL to create an SSLv2 connection to a malicious server, that server could cause the client to crash. (CVE-2006-4343)

An attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA key with exponent 3 is used it may be possible for an attacker to forge a PKCS #1 v1.5 signature that would be incorrectly verified by implementations that do not check for excess data in the RSA exponentiation result of the signature. This issue affected applications that use OpenSSL to verify X.509 certificates as well as other uses of PKCS #1 v1.5. (CVE-2006-4339)

OpenSSL contained a software work-around for a bug in SSL handling in Microsoft Internet Explorer version 3.0.2. It is enabled in most servers that use OpenSSL to provide support for SSL and TLS. This work-around could allow an attacker, acting as a 'man in the middle' to force an SSL connection to use SSL 2.0 rather than a stronger protocol, such as SSL 3.0 or TLS 1.0. (CVE-2005-2969)

During OpenSSL parsing of certain invalid ASN.1 structures an error condition was mishandled. This can result in an infinite loop which consumed system memory (CVE-2006-2937).

Certain public key types can take disproportionate amounts of time to process in OpenSSL, leading to a denial of service. (CVE-2006-2940)

A flaw was discovered in the way that the Python repr() function handled UTF-32/UCS-4 strings. If an application written in Python used the repr() function on untrusted data, this could lead to a denial of service or possibly allow the execution of arbitrary code with the privileges of the Python application. (CVE-2006-4980)

A flaw was discovered in the strxfrm() function of Python's locale module. Strings generated by this function were not properly NULL-terminated. This may possibly cause disclosure of data stored in the memory of a Python application using this function.
(CVE-2007-2052)

Multiple integer overflow flaws were discovered in Python's imageop module. If an application written in Python used the imageop module to process untrusted images, it could cause the application to crash, enter an infinite loop, or possibly execute arbitrary code with the privileges of the Python interpreter. (CVE-2007-4965)

A stack-based buffer overflow was discovered in the Python interpreter, which could allow a local user to gain privileges by running a script with a long name from the current working directory.
(CVE-2006-1542)

Users of Red Hat Network Satellite Server should upgrade to these updated packages, which contain backported patches to correct these issues.

ID	Name	Product	Family	Published	Updated	Severity
40374	VMSA-2008-0003 : Moderate: Updated aacraid driver and samba and python Service Console updates	Nessus	VMware ESX Local Security Checks	7/27/2009	1/6/2021	high
41186	SuSE9 Security Update : Python (YOU Patch Number 12046)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	medium
29723	Mac OS X Multiple Vulnerabilities (Security Update 2007-009)	Nessus	MacOS X Local Security Checks	12/18/2007	5/28/2024	critical
43836	RHEL 4 : Solaris client in Satellite Server (RHSA-2008:0264)	Nessus	Red Hat Local Security Checks	1/10/2010	1/14/2021	critical
43838	RHEL 3 / 4 : Solaris client in Satellite Server (RHSA-2008:0525)	Nessus	Red Hat Local Security Checks	1/10/2010	1/14/2021	critical

Detections

Analytics

Plugins Search

high

medium

critical

critical

critical