Detections
Analytics

RHEL 5 : aide (RHSA-2007:0539)

low Nessus Plugin ID 25984

Synopsis

The remote Red Hat host is missing a security update.

Description

An updated aide package that fixes various bugs is now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Advanced Intrusion Detection Environment (AIDE) is a file integrity checker and intrusion detection program.

A flaw was discovered in the way file checksums were stored in the AIDE database. A packaging flaw in the Red Hat AIDE rpm resulted in the file database not containing any file checksum information. This could prevent AIDE from detecting certain file modifications.
(CVE-2007-3849)

This update also fixes the following bugs :

* certain configurations could result in a segmentation fault upon initialization.

* AIDE was unable to open its log file in the LSPP evaluated configuration.

* if AIDE found SELinux context differences, the changed files report it generated only included the first 32 characters of the context.

All users of AIDE are advised to upgrade to this updated package containing AIDE version 0.13.1 which is not vulnerable to these issues.

Solution

Update the affected aide package.

See Also

https://access.redhat.com/security/cve/cve-2007-3849

https://access.redhat.com/errata/RHSA-2007:0539

Plugin Details

Severity: Low

ID: 25984

File Name: redhat-RHSA-2007-0539.nasl

Version: 1.24

Type: local

Agent: unix

Published: 9/5/2007

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 1.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:5, p-cpe:/a:redhat:enterprise_linux:aide

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 9/4/2007

Vulnerability Publication Date: 9/4/2007

Reference Information

CVE: CVE-2007-3849

CWE: 264

RHSA: 2007:0539