Test ID:	1.3.6.1.4.1.25623.1.0.59692
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-0543 (iscsi-initiator-utils)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to iscsi-initiator-utils announced via advisory FEDORA-2007-0543. The iscsi package provides the server daemon for the iSCSI protocol, as well as the utility programs used to manage it. iSCSI is a protocol for distributed disk access using SCSI commands sent over Internet Protocol networks. Update Information: This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release include two security fixes, bug fixes and new features. The tools in this release use a different db format, but the tools are able to read old and new formats. If you want to use the new features you must update the db, by rediscovering your targets and reconfiguring them (set per target CHAP, iscsi.node, iscsi.conn, etc settings again). Once the db has been updated you cannot use older tools on it. See the README and man pages for information on the new features. ChangeLog: * Tue Jun 12 2007 Mike Christie - 6.2.0.865-0.0 - Rebase upstream References: [ 1 ] CVE-2007-3099 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3099 [ 2 ] CVE-2007-3100 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3100 Updated packages: 1fb51eeaae969c281da3fb3ce912c163be50b3e8 iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc7.ppc64.rpm 3ef04ef081a32351fca2a189b594260a685b34bb iscsi-initiator-utils-6.2.0.865-0.0.fc7.ppc64.rpm 5dc2ee0414f7b0f7db915bf8cb32ca82f4879bbb iscsi-initiator-utils-6.2.0.865-0.0.fc7.i386.rpm f2789c64db6c417c20359db36e66dbc82d1a8a8b iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc7.i386.rpm c0722eed622c2dc0a93acaf98b826ac9721f7064 iscsi-initiator-utils-6.2.0.865-0.0.fc7.x86_64.rpm 4de397d25eb506d04feb965db6bff89866246047 iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc7.x86_64.rpm 1090721c6e3e100fe3e46bb5a4ae4ac90ca68c25 iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc7.ppc.rpm 49e322240865d9a8989d893ffd39414b33d2fee9 iscsi-initiator-utils-6.2.0.865-0.0.fc7.ppc.rpm fb8f74159b3efedc54800c19b9304a057512e383 iscsi-initiator-utils-6.2.0.865-0.0.fc7.src.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://docs.fedoraproject.org/yum/. Solution: Apply the appropriate updates. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-0543 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3099 1018246 http://www.securitytracker.com/id?1018246 24471 http://www.securityfocus.com/bid/24471 25679 http://secunia.com/advisories/25679 25749 http://secunia.com/advisories/25749 26438 http://secunia.com/advisories/26438 26543 http://secunia.com/advisories/26543 37269 http://osvdb.org/37269 DSA-1314 http://www.debian.org/security/2007/dsa-1314 RHSA-2007:0497 http://www.redhat.com/support/errata/RHSA-2007-0497.html SUSE-SR:2007:017 http://www.novell.com/linux/security/advisories/2007_17_sr.html http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719 http://support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html http://svn.berlios.de/viewcvs/open-iscsi?rev=857&view=rev openiscsi-mgmtipc-dos(34944) https://exchange.xforce.ibmcloud.com/vulnerabilities/34944 oval:org.mitre.oval:def:11595 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11595 Common Vulnerability Exposure (CVE) ID: CVE-2007-3100 37270 http://osvdb.org/37270 http://svn.berlios.de/viewcvs/open-iscsi?rev=858&view=rev openiscsi-log-dos(34943) https://exchange.xforce.ibmcloud.com/vulnerabilities/34943 oval:org.mitre.oval:def:10653 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10653
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.