Test ID:	1.3.6.1.4.1.25623.1.0.58340
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1289-1)
Summary:	The remote host is missing an update for the Debian 'linux-2.6' package(s) announced via the DSA-1289-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'linux-2.6' package(s) announced via the DSA-1289-1 advisory. Vulnerability Insight: Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1496 Michal Miroslaw reported a DoS vulnerability (crash) in netfilter. A remote attacker can cause a NULL pointer dereference in the nfnetlink_log function. CVE-2007-1497 Patrick McHardy reported an vulnerability in netfilter that may allow attackers to bypass certain firewall rules. The nfctinfo value of reassembled IPv6 packet fragments were incorrectly initialized to 0 which allowed these packets to become tracked as ESTABLISHED. CVE-2007-1861 Jaco Kroon reported a bug in which NETLINK_FIB_LOOKUP packages were incorrectly routed back to the kernel resulting in an infinite recursion condition. Local users can exploit this behavior to cause a DoS (crash). For the stable distribution (etch) these problems have been fixed in version 2.6.18.dfsg.1-12etch2. The following matrix lists additional packages that were rebuilt for compatibility with or to take advantage of this update: Debian 4.0 (etch) fai-kernels 1.17+etch2 user-mode-linux 2.6.18-1um-2etch2 kernel-patch-openvz 028.18.1etch1 We recommend that you upgrade your kernel package immediately and reboot the machine. If you have built a custom kernel from the kernel source package, you will need to rebuild to take advantage of these fixes. Affected Software/OS: 'linux-2.6' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1496 BugTraq ID: 22946 http://www.securityfocus.com/bid/22946 Debian Security Information: DSA-1289 (Google Search) http://www.debian.org/security/2007/dsa-1289 http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9831 http://www.redhat.com/support/errata/RHSA-2007-0347.html http://secunia.com/advisories/24492 http://secunia.com/advisories/25228 http://secunia.com/advisories/25288 http://secunia.com/advisories/25392 http://secunia.com/advisories/25961 http://secunia.com/advisories/26620 SuSE Security Announcement: SUSE-SA:2007:043 (Google Search) http://www.novell.com/linux/security/advisories/2007_43_kernel.html http://www.ubuntu.com/usn/usn-464-1 http://www.vupen.com/english/advisories/2007/0944 Common Vulnerability Exposure (CVE) ID: CVE-2007-1497 BugTraq ID: 23976 http://www.securityfocus.com/bid/23976 http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 http://www.osvdb.org/33028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10457 Common Vulnerability Exposure (CVE) ID: CVE-2007-1861 BugTraq ID: 23677 http://www.securityfocus.com/bid/23677 Bugtraq: 20070508 FLEA-2007-0016-1: kernel (Google Search) http://www.securityfocus.com/archive/1/467939/30/6690/threaded Bugtraq: 20070615 rPSA-2007-0124-1 kernel xen (Google Search) http://www.securityfocus.com/archive/1/471457 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11616 http://secunia.com/advisories/25030 http://secunia.com/advisories/25083 http://secunia.com/advisories/25691 http://secunia.com/advisories/26133 http://secunia.com/advisories/26139 http://www.ubuntu.com/usn/usn-486-1 http://www.ubuntu.com/usn/usn-489-1 http://www.vupen.com/english/advisories/2007/1595 XForce ISS Database: kernel-netlinkfiblookup-dos(34014) https://exchange.xforce.ibmcloud.com/vulnerabilities/34014
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.