RHEL 2.1 : dump (RHSA-2005:583)

low Nessus Plugin ID 19380

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated dump packages that address two security issues are now available for Red Hat Enterprise Linux 2.1.

This update has been rated as having low security impact by the Red Hat Security Response Team.

Dump examines files in a file system, determines which ones need to be backed up, and copies those files to a specified disk, tape, or other storage medium.

A flaw was found with dump file locking. A malicious local user could manipulate the file lock in such a way as to prevent dump from running. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the name CVE-2002-1914 to this issue.

Users of dump should upgrade to these erratum packages, which contain a patch to resolve this issue.

Solution

Update the affected dump and / or rmt packages.

Plugin Details

Severity: Low

ID: 19380

File Name: redhat-RHSA-2005-583.nasl

Version: 1.26

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 8/4/2005

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:dump, p-cpe:/a:redhat:enterprise_linux:rmt, cpe:/o:redhat:enterprise_linux:2.1

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 8/3/2005

Vulnerability Publication Date: 12/31/2002

Reference Information

CVE: CVE-2002-1914

RHSA: 2005:583

Detections

Analytics