Detections
Analytics
openSUSE 10 Security Update : kernel (kernel-4987)
high Nessus Plugin ID 31090
Synopsis
The remote openSUSE host is missing a security update.Description
This kernel update fixes the following security problems :- CVE-2008-0600: A local privilege escalation was found in the vmsplice_pipe system call, which could be used by local attackers to gain root access.
- CVE-2007-6151: The isdn_ioctl function in isdn_common.c allowed local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.
Solution
Update the affected kernel packages.Plugin Details
Severity: High
ID: 31090
File Name: suse_kernel-4987.nasl
Version: 1.14
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 2/14/2008
Updated: 1/14/2021
Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:kernel-xenpae, p-cpe:/a:novell:opensuse:kernel-source, cpe:/o:novell:opensuse:10.2, p-cpe:/a:novell:opensuse:kernel-bigsmp, p-cpe:/a:novell:opensuse:kernel-syms, p-cpe:/a:novell:opensuse:kernel-default, p-cpe:/a:novell:opensuse:kernel-xen, p-cpe:/a:novell:opensuse:kernel-kdump
Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/11/2008
Exploitable With
CANVAS (CANVAS)
Core Impact
Reference Information
CVE: CVE-2007-6151, CVE-2008-0600