Detections
Analytics
CentOS 5 : opal (CESA-2007:0957)
medium Nessus Plugin ID 43656
Language:
Synopsis
The remote CentOS host is missing one or more security updates.Description
Updated opal packages that fix a security issue are now available for Red Hat Enterprise Linux 5.This update has been rated as having moderate security impact by the Red Hat Security Response Team.
Open Phone Abstraction Library (opal) is implementation of various telephony and video communication protocols for use over packet based networks.
In Red Hat Enterprise Linux 5, the Ekiga application uses opal.
A flaw was discovered in the way opal handled certain Session Initiation Protocol (SIP) packets. An attacker could use this flaw to crash an application, such as Ekiga, which is linked with opal.
(CVE-2007-4924)
Users should upgrade to these updated opal packages which contain a backported patch to correct this issue.
Solution
Update the affected opal packages.See Also
Plugin Details
Severity: Medium
ID: 43656
File Name: centos_RHSA-2007-0957.nasl
Version: 1.12
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 1/6/2010
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.5
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:centos:centos:opal-devel, cpe:/o:centos:centos:5, p-cpe:/a:centos:centos:opal
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Patch Publication Date: 10/9/2007
Vulnerability Publication Date: 10/8/2007
Reference Information
CVE: CVE-2007-4924