Test ID:	1.3.6.1.4.1.25623.1.0.50435
Category:	Fedora Local Security Checks
Title:	Fedora Core 3 FEDORA-2005-025 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kernel announced via advisory FEDORA-2005-025. The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. CVE-2005-0001 Paul Starzetz from isec.pl found an exploitable hole in the x86 SMP page fault handler which could lead to privilege escalation. http://www.isec.pl/vulnerabilities/isec-0022-pagefault.txt This update additionally fixes a random memory corruption issue present in the previous update, and in addition updates to the latest -ac collection of patches. A full changelog of the update vs the previous -ac8 based release is available at http://lkml.org/lkml/2005/1/13/219 * Thu Jan 13 2005 Dave Jones - Update to 2.6.10-ac9 - Fix slab corruption in ACPI video code. * Mon Jan 10 2005 Dave Jones - Add another Lexar card reader to the whitelist. (#143600) - Package asm-m68k for asm-ppc includes. (don't ask). (#144604) This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ 577dbd8cabfd0416fe7112b4c96c07f3 SRPMS/kernel-2.6.10-1.741_FC3.src.rpm 2483d17b694756279149f955e0a2ceaf x86_64/kernel-2.6.10-1.741_FC3.x86_64.rpm 19eec5a6827f1285e3249c7a441a970d x86_64/kernel-smp-2.6.10-1.741_FC3.x86_64.rpm a2c09307259042d1e90b4910ce741999 x86_64/debug/kernel-debuginfo-2.6.10-1.741_FC3.x86_64.rpm a09e23b469dc0981a054dcbc979429e0 x86_64/kernel-doc-2.6.10-1.741_FC3.noarch.rpm ef6ec76b36721c6610de383aa6a02631 i386/kernel-2.6.10-1.741_FC3.i586.rpm d2d41579dd1d90f2454eb8195455d859 i386/kernel-smp-2.6.10-1.741_FC3.i586.rpm f41ea9b8b4b9ac85a3a690642eb48a3c i386/debug/kernel-debuginfo-2.6.10-1.741_FC3.i586.rpm c12673b9d5a1ff15058239b0860f250c i386/kernel-2.6.10-1.741_FC3.i686.rpm 0ff39cefcc3511f36597383c1469b05f i386/kernel-smp-2.6.10-1.741_FC3.i686.rpm 35f3b81d0d090b019ec0d76e2df6f47c i386/debug/kernel-debuginfo-2.6.10-1.741_FC3.i686.rpm a09e23b469dc0981a054dcbc979429e0 i386/kernel-doc-2.6.10-1.741_FC3.noarch.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://fedoranews.org/blog/index.php?p=278 Risk factor : High CVSS Score: 6.9
Cross-Ref:	BugTraq ID: 12244 Common Vulnerability Exposure (CVE) ID: CVE-2005-0001 http://www.securityfocus.com/bid/12244 Bugtraq: 20050112 Linux kernel i386 SMP page fault handler privilege escalation (Google Search) http://marc.info/?l=bugtraq&m=110554694522719&w=2 Bugtraq: 20050114 [USN-60-0] Linux kernel vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=110581146702951&w=2 Conectiva Linux advisory: CLA-2005:930 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 Debian Security Information: DSA-1067 (Google Search) http://www.debian.org/security/2006/dsa-1067 Debian Security Information: DSA-1069 (Google Search) http://www.debian.org/security/2006/dsa-1069 Debian Security Information: DSA-1070 (Google Search) http://www.debian.org/security/2006/dsa-1070 Debian Security Information: DSA-1082 (Google Search) http://www.debian.org/security/2006/dsa-1082 https://bugzilla.fedora.us/show_bug.cgi?id=2336 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 http://isec.pl/vulnerabilities/isec-0022-pagefault.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322 http://www.redhat.com/support/errata/RHSA-2005-016.html http://www.redhat.com/support/errata/RHSA-2005-017.html http://www.redhat.com/support/errata/RHSA-2005-043.html http://www.redhat.com/support/errata/RHSA-2005-092.html http://securitytracker.com/id?1012862 http://secunia.com/advisories/13822 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 http://www.trustix.org/errata/2005/0001/ XForce ISS Database: linux-fault-handler-gain-privileges(18849) https://exchange.xforce.ibmcloud.com/vulnerabilities/18849
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.