The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened (CVE-2016-10152)

  - The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to     use configurations from environment variables, which allows local users to gain privileges via the (1)     HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
    (CVE-2016-10151)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened (CVE-2016-10152)

  - The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to     use configurations from environment variables, which allows local users to gain privileges via the (1)     HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
    (CVE-2016-10151)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened (CVE-2016-10152)

  - The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to     use configurations from environment variables, which allows local users to gain privileges via the (1)     HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
    (CVE-2016-10151)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to     use configurations from environment variables, which allows local users to gain privileges via the (1)     HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
    (CVE-2016-10151)

  - The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the '.athena.mit.edu' default     domain when opening the configuration file fails, which allows remote attackers to gain root privileges by     poisoning the DNS cache. (CVE-2016-10152)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the '.athena.mit.edu' default     domain when opening the configuration file fails, which allows remote attackers to gain root privileges by     poisoning the DNS cache. (CVE-2016-10152)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2016-10152 (hard-coded DNS fallback) Fix CVE-2016-10151 (weak SUID check) Move package to autosetup Resolves: #1332509 Resolves:
#1332494

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201805-01 (hesiod: Root privilege escalation)

    Multiple vulnerabilities have been discovered in hesiod that have       remained unaddressed. Please review the referenced CVE identifiers for       details.
  Impact :

    A remote or local attacker may be able to escalate privileges to root.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
199201	RHEL 7 : hesiod (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199192	RHEL 5 : hesiod (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199146	RHEL 6 : hesiod (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
161579	EulerOS 2.0 SP3 : hesiod (EulerOS-SA-2022-1729)	Nessus	Huawei Local Security Checks	critical
159261	EulerOS 2.0 SP8 : hesiod (EulerOS-SA-2022-1348)	Nessus	Huawei Local Security Checks	critical
159095	EulerOS 2.0 SP5 : hesiod (EulerOS-SA-2022-1325)	Nessus	Huawei Local Security Checks	critical
120548	Fedora 29 : hesiod (2018-792ff3cafa)	Nessus	Fedora Local Security Checks	critical
120313	Fedora 28 : hesiod (2018-2b274689e8)	Nessus	Fedora Local Security Checks	critical
118334	Fedora 27 : hesiod (2018-25c6d1b417)	Nessus	Fedora Local Security Checks	critical
109533	GLSA-201805-01 : hesiod: Root privilege escalation	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2016-10152

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical