Detections
Analytics
Scientific Linux Security Update : kernel on SL4.x i386/x86_64
medium Nessus Plugin ID 60246
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
These new kernel packages contain fixes for the security issues described below :- a flaw in the ISDN CAPI subsystem that allowed a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN network to the victim's machine. (CVE-2007-1217, Moderate)
- a flaw in the perfmon subsystem on ia64 platforms that allowed a local user to cause a denial of service.
(CVE-2006-0558, Moderate)
In addition, the following bugs were addressed :
- a panic after reloading of the LSI Fusion driver.
- a vm performance problem was corrected by balancing inactive page lists.
- added a nodirplus option to address NFSv3 performance issues with large directories.
- changed the personality handling to disallow personality changes of setuid and setgid binaries. This ensures they keep any randomization and Exec-shield protection.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 60246
File Name: sl_20070904_kernel_on_SL4_x.nasl
Version: 1.5
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 9/4/2007
Reference Information
CVE: CVE-2006-0558, CVE-2007-1217
CWE: 119