Test ID:	1.3.6.1.4.1.25623.1.0.50436
Category:	Fedora Local Security Checks
Title:	Fedora Core 2 FEDORA-2005-026 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kernel announced via advisory FEDORA-2005-026. The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. CVE-2005-0001 Paul Starzetz from isec.pl found an exploitable hole in the x86 SMP page fault handler which could lead to privilege escalation. http://www.isec.pl/vulnerabilities/isec-0022-pagefault.txt This update additionally fixes a random memory corruption issue present in the previous update, and in addition updates to the latest -ac collection of patches. A full changelog of the update vs the previous -ac8 based release is available at http://lkml.org/lkml/2005/1/13/219 This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ ef61c4cc907d2f28d9073aafa62ace4c SRPMS/kernel-2.6.10-1.9_FC2.src.rpm 1a822614ed6fb852582f869e2c48d44c x86_64/kernel-2.6.10-1.9_FC2.x86_64.rpm d5f79b14b44ec831d1bd1cf95fea1a69 x86_64/kernel-smp-2.6.10-1.9_FC2.x86_64.rpm 4e0ddb71d53e2fab550a9dd90297f75c x86_64/debug/kernel-debuginfo-2.6.10-1.9_FC2.x86_64.rpm 8364bc9e28f0aced714d31eb203ca011 x86_64/kernel-sourcecode-2.6.10-1.9_FC2.noarch.rpm 370d410c882562d8715fb3c9d82471af x86_64/kernel-doc-2.6.10-1.9_FC2.noarch.rpm a531f9718e0061a9e43cb2e9d9f32e90 i386/kernel-2.6.10-1.9_FC2.i586.rpm d2e9bd5a230e6e40db06b7c879fe383d i386/kernel-smp-2.6.10-1.9_FC2.i586.rpm 0be4bef6761c8a386bc14014286b7781 i386/debug/kernel-debuginfo-2.6.10-1.9_FC2.i586.rpm 06d956b7ba4e55a9716449d0365cafe5 i386/kernel-2.6.10-1.9_FC2.i686.rpm b952b3fe7324efa87a104b995a763b0b i386/kernel-smp-2.6.10-1.9_FC2.i686.rpm ed19c4f153f2c941e73bec51023dd59d i386/debug/kernel-debuginfo-2.6.10-1.9_FC2.i686.rpm 8364bc9e28f0aced714d31eb203ca011 i386/kernel-sourcecode-2.6.10-1.9_FC2.noarch.rpm 370d410c882562d8715fb3c9d82471af i386/kernel-doc-2.6.10-1.9_FC2.noarch.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://fedoranews.org/blog/index.php?p=277 Risk factor : High CVSS Score: 6.9
Cross-Ref:	BugTraq ID: 12244 Common Vulnerability Exposure (CVE) ID: CVE-2005-0001 http://www.securityfocus.com/bid/12244 Bugtraq: 20050112 Linux kernel i386 SMP page fault handler privilege escalation (Google Search) http://marc.info/?l=bugtraq&m=110554694522719&w=2 Bugtraq: 20050114 [USN-60-0] Linux kernel vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=110581146702951&w=2 Conectiva Linux advisory: CLA-2005:930 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 Debian Security Information: DSA-1067 (Google Search) http://www.debian.org/security/2006/dsa-1067 Debian Security Information: DSA-1069 (Google Search) http://www.debian.org/security/2006/dsa-1069 Debian Security Information: DSA-1070 (Google Search) http://www.debian.org/security/2006/dsa-1070 Debian Security Information: DSA-1082 (Google Search) http://www.debian.org/security/2006/dsa-1082 https://bugzilla.fedora.us/show_bug.cgi?id=2336 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 http://isec.pl/vulnerabilities/isec-0022-pagefault.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322 http://www.redhat.com/support/errata/RHSA-2005-016.html http://www.redhat.com/support/errata/RHSA-2005-017.html http://www.redhat.com/support/errata/RHSA-2005-043.html http://www.redhat.com/support/errata/RHSA-2005-092.html http://securitytracker.com/id?1012862 http://secunia.com/advisories/13822 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 http://www.trustix.org/errata/2005/0001/ XForce ISS Database: linux-fault-handler-gain-privileges(18849) https://exchange.xforce.ibmcloud.com/vulnerabilities/18849
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.