Detections
Analytics
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
high Nessus Plugin ID 60877
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
This update fixes the following security issue :- The rds_page_copy_user() function in the Linux kernel Reliable Datagram Sockets (RDS) protocol implementation was missing sanity checks. A local, unprivileged user could use this flaw to escalate their privileges.
(CVE-2010-3904, Important)
The system must be rebooted for this update to take effect.
Solution
Update the affected packages.See Also
Plugin Details
Severity: High
ID: 60877
File Name: sl_20101025_kernel_on_SL5_x.nasl
Version: 1.9
Type: local
Agent: unix
Published: 8/1/2012
Updated: 5/14/2023
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/25/2010
CISA Known Exploited Vulnerability Due Dates: 6/2/2023
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Reliable Datagram Sockets (RDS) Privilege Escalation)
Reference Information
CVE: CVE-2010-3904