Test ID:	1.3.6.1.4.1.25623.1.0.52874
Category:	Turbolinux Local Security Tests
Title:	Turbolinux TLSA-2004-1 (kernel)
Summary:	Turbolinux TLSA-2004-1 (kernel)
Description:	The remote host is missing an update to kernel announced via advisory TLSA-2004-1. The kernel package contains the Linux kernel (vmlinuz), the core of your Linux operating system. The kernel handles the basic functions of the operating system. The Linux memory management subsystem (mremap) isssue have been discovered in Kernel2.4. The local users may be able to gain root privileges. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2004-1 Risk factor : High
Cross-Ref:	BugTraq ID: 9356 Common Vulnerability Exposure (CVE) ID: CVE-2003-0985 Bugtraq: 20040105 Linux kernel mremap vulnerability (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=107332782121916&w=2 http://isec.pl/vulnerabilities/isec-0013-mremap.txt Bugtraq: 20040105 Linux kernel do_mremap() proof-of-concept exploit code (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=107340358402129&w=2 Bugtraq: 20040106 Linux mremap bug correction (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=107340814409017&w=2 Debian Security Information: DSA-423 (Google Search) http://www.debian.org/security/2004/dsa-423 Debian Security Information: DSA-450 (Google Search) http://www.debian.org/security/2004/dsa-450 Debian Security Information: DSA-1070 (Google Search) http://www.debian.org/security/2006/dsa-1070 Debian Security Information: DSA-1067 (Google Search) http://www.debian.org/security/2006/dsa-1067 Debian Security Information: DSA-1069 (Google Search) http://www.debian.org/security/2006/dsa-1069 Debian Security Information: DSA-1082 (Google Search) http://www.debian.org/security/2006/dsa-1082 Debian Security Information: DSA-413 (Google Search) http://www.debian.org/security/2004/dsa-413 Debian Security Information: DSA-417 (Google Search) http://www.debian.org/security/2004/dsa-417 Debian Security Information: DSA-427 (Google Search) http://www.debian.org/security/2004/dsa-427 Debian Security Information: DSA-439 (Google Search) http://www.debian.org/security/2004/dsa-439 Debian Security Information: DSA-440 (Google Search) http://www.debian.org/security/2004/dsa-440 Debian Security Information: DSA-442 (Google Search) http://www.debian.org/security/2004/dsa-442 Debian Security Information: DSA-470 (Google Search) http://www.debian.org/security/2004/dsa-470 Debian Security Information: DSA-475 (Google Search) http://www.debian.org/security/2004/dsa-475 SuSE Security Announcement: SuSE-SA:2004:001 (Google Search) SuSE Security Announcement: SuSE-SA:2004:003 (Google Search) http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html Conectiva Linux advisory: CLA-2004:799 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799 En Garde Linux Advisory: ESA-20040105-001 http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html http://www.redhat.com/support/errata/RHSA-2003-416.html http://www.redhat.com/support/errata/RHSA-2003-417.html http://www.redhat.com/support/errata/RHSA-2003-418.html http://www.redhat.com/support/errata/RHSA-2003-419.html Immunix Linux Advisory: IMNX-2004-73-001-01 http://download.immunix.org/ImmunixOS/7.3/updates/IMNX-2004-73-001-01 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:001 SGI Security Advisory: 20040102-01-U ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U http://marc.theaimsgroup.com/?l=bugtraq&m=107332754521495&w=2 Bugtraq: 20040107 [slackware-security] Kernel security update (SSA:2004-006-01) (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=107350348418373&w=2 Bugtraq: 20040108 [slackware-security] Slackware 8.1 kernel security update (SSA:2004-008-01) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html Bugtraq: 20040112 SmoothWall Project Security Advisory SWP-2004:001 (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=107394143105081&w=2 CERT/CC vulnerability note: VU#490620 http://www.kb.cert.org/vuls/id/490620 Computer Incident Advisory Center Bulletin: O-045 http://www.ciac.org/ciac/bulletins/o-045.shtml http://www.securityfocus.com/bid/9356 http://www.osvdb.org/3315 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:860 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:867 http://secunia.com/advisories/10532 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 XForce ISS Database: linux-domremap-gain-privileges(14135) http://xforce.iss.net/xforce/xfdb/14135
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: