An updated nfs-utils-lib package to correct two security flaws is now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The nfs-utils-lib package contains support libraries that are needed by the commands and daemons of the nfs-utils package.

The updated nfs-utils package fixes the following vulnerabilities :

Tenable Network Security discovered a stack-based buffer overflow flaw in the RPC library used by nfs-utils-lib. A remote unauthenticated attacker who can access an application linked against nfs-utils-lib could trigger this flaw and cause the application to crash. On Red Hat Enterprise Linux 5 it is not possible to exploit this flaw to run arbitrary code as the overflow is blocked by FORTIFY_SOURCE.
(CVE-2007-3999)

Tony Ernst from SGI has discovered a flaw in the way nfsidmap maps NFSv4 unknown uids. If an unknown user ID is encountered on an NFSv4 mounted filesystem, the files will default to being owned by 'root' rather than 'nobody'. (CVE-2007-4135)

Users of nfs-utils-lib are advised to upgrade to this updated package, which contains backported patches to resolve these issues.

This update incorporates fixes for a stack overflow in the rpcsec_gss implementation in libgssrpc (CVE-2007-3999) and a potential write through an uninitialized pointer in kadmind (CVE-2007-4000).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Thu Jan 24 2008 Steve Dickson <steved at redhat.com>     0.1.7-15

    - Protect from buffer overflow in the GSS code. (bz       362121)

    - Mon Dec 17 2007 Steve Dickson <steved at redhat.com>       0.1.7-14

    - Fixed typo in /etc/netconfig file (bz 414471)

    - Thu Oct 25 2007 Steve Dickson <steved at redhat.com>       0.1.7-13

    - Added a check for the ARM arch (bz 351071)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0858 advisory.

    [1.5-28]
     - add preliminary patch to fix buffer overflow in rpcsec_gss implementation        in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized        pointer in kadmind (#250976, CVE-2007-4000)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.4 that is older than version 10.4.11 or a version of Mac OS X 10.3 that does not have Security Update 2007-008 applied.  This update contains several security fixes for the following programs :


 - Flash Player Plugin
 - AppleRAID
 - BIND
 - bzip2
 - CFFTP
 - CFNetwork
 - CoreFoundation
 - CoreText
 - Kerberos
 - Kernel
 - remote_cmds
 - Networking
 - NFS
 - NSURL
 - Safari
 - SecurityAgent
 - WebCore
 - WebKit

ID	名稱	產品	系列	已發布	已更新	嚴重性
26907	RHEL 5 : nfs-utils-lib (RHSA-2007:0951)	Nessus	Red Hat Local Security Checks	2007/10/3	2021/1/14	critical
27744	Fedora 7 : krb5-1.6.1-3.fc7 (2007-2017)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	critical
31362	Fedora 8 : libtirpc-0.1.7-15.fc8 (2008-1017)	Nessus	Fedora Local Security Checks	2008/3/7	2021/1/11	critical
67562	Oracle Linux 5 : Important: / krb5 (ELSA-2007-0858)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
4284	Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)	Nessus Network Monitor	Operating System Detection	2007/11/15	2019/3/6	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical