Test ID:	1.3.6.1.4.1.25623.1.0.61752
Category:	Fedora Local Security Checks
Title:	Fedora Core 8 FEDORA-2008-8980 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kernel announced via advisory FEDORA-2008-8980. For details on the security addressed with this update, please visit the referenced security advisories. References: [ 1 ] Bug #464502 - CVE-2008-3831 kernel: i915 kernel drm driver arbitrary ioremap https://bugzilla.redhat.com/show_bug.cgi?id=464502 [ 2 ] Bug #460401 - CVE-2008-3525 kernel: missing capability checks in sbni_ioctl() https://bugzilla.redhat.com/show_bug.cgi?id=460401 [ 3 ] Bug #466707 - CVE-2008-4554 kernel: don't allow splice() to files opened with O_APPEND https://bugzilla.redhat.com/show_bug.cgi?id=466707 [ 4 ] Bug #466079 - CVE-2008-4576 kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH https://bugzilla.redhat.com/show_bug.cgi?id=466079 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update kernel' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-8980 Risk factor : High CVSS Score: 7.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3831 1021065 http://securitytracker.com/id?1021065 20081112 rPSA-2008-0316-1 kernel http://www.securityfocus.com/archive/1/498285/100/0/threaded 245846 http://sunsolve.sun.com/search/document.do?assetkey=1-26-245846-1 31792 http://www.securityfocus.com/bid/31792 32315 http://secunia.com/advisories/32315 32386 http://secunia.com/advisories/32386 32709 http://secunia.com/advisories/32709 32918 http://secunia.com/advisories/32918 33182 http://secunia.com/advisories/33182 33586 http://secunia.com/advisories/33586 DSA-1655 http://www.debian.org/security/2008/dsa-1655 FEDORA-2008-8929 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html FEDORA-2008-8980 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html MDVSA-2008:224 http://www.mandriva.com/security/advisories?name=MDVSA-2008:224 RHSA-2008:1017 http://www.redhat.com/support/errata/RHSA-2008-1017.html RHSA-2009:0009 http://www.redhat.com/support/errata/RHSA-2009-0009.html USN-659-1 http://www.ubuntu.com/usn/usn-659-1 USN-679-1 http://www.ubuntu.com/usn/usn-679-1 [source-changes] 20081017 CVS: cvs.openbsd.org: src http://archives.neohapsis.com/archives/openbsd/cvs/2008-10/0365.html http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz http://wiki.rpath.com/Advisories:rPSA-2008-0316 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316 http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7%3Br2=1.8 oval:org.mitre.oval:def:11542 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11542 Common Vulnerability Exposure (CVE) ID: CVE-2008-4410 BugTraq ID: 31565 http://www.securityfocus.com/bid/31565 http://www.openwall.com/lists/oss-security/2008/10/03/3 http://osvdb.org/48743 http://secunia.com/advisories/32124 SuSE Security Announcement: SUSE-SA:2008:053 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html XForce ISS Database: linux-kernel-vmiwriteldtentry-dos(45687) https://exchange.xforce.ibmcloud.com/vulnerabilities/45687 Common Vulnerability Exposure (CVE) ID: CVE-2008-3247 BugTraq ID: 30351 http://www.securityfocus.com/bid/30351 http://www.securitytracker.com/id?1020544 http://secunia.com/advisories/31172 http://secunia.com/advisories/31202 SuSE Security Announcement: SUSE-SA:2008:037 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html XForce ISS Database: linux-kernel-ldt-dos(43979) https://exchange.xforce.ibmcloud.com/vulnerabilities/43979 Common Vulnerability Exposure (CVE) ID: CVE-2008-3525 1020969 http://www.securitytracker.com/id?1020969 32103 http://secunia.com/advisories/32103 32237 http://secunia.com/advisories/32237 32356 http://secunia.com/advisories/32356 32370 http://secunia.com/advisories/32370 32393 http://secunia.com/advisories/32393 32759 http://secunia.com/advisories/32759 33201 http://secunia.com/advisories/33201 33280 http://secunia.com/advisories/33280 ADV-2008-2511 http://www.vupen.com/english/advisories/2008/2511 ADV-2008-2714 http://www.vupen.com/english/advisories/2008/2714 DSA-1653 http://www.debian.org/security/2008/dsa-1653 MDVSA-2008:220 http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 MDVSA-2008:223 http://www.mandriva.com/security/advisories?name=MDVSA-2008:223 RHSA-2008:0787 http://www.redhat.com/support/errata/RHSA-2008-0787.html RHSA-2008:0973 http://www.redhat.com/support/errata/RHSA-2008-0973.html SUSE-SA:2008:047 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html SUSE-SA:2008:049 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html SUSE-SA:2008:051 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html SUSE-SA:2008:052 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html SUSE-SA:2008:053 SUSE-SR:2008:025 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html [oss-security] 20080829 CVE-2008-3525 kernel: missing capability checks in sbni_ioctl() http://www.openwall.com/lists/oss-security/2008/08/29/2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7 oval:org.mitre.oval:def:5671 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671 oval:org.mitre.oval:def:9364 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364 Common Vulnerability Exposure (CVE) ID: CVE-2008-4554 BugTraq ID: 31903 http://www.securityfocus.com/bid/31903 Debian Security Information: DSA-1681 (Google Search) http://www.debian.org/security/2008/dsa-1681 Debian Security Information: DSA-1687 (Google Search) http://www.debian.org/security/2008/dsa-1687 https://bugzilla.redhat.com/show_bug.cgi?id=466707 http://www.openwall.com/lists/oss-security/2008/10/13/1 http://www.openwall.com/lists/oss-security/2008/10/14/5 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11142 http://secunia.com/advisories/32998 http://secunia.com/advisories/33180 http://secunia.com/advisories/35390 SuSE Security Announcement: SUSE-SA:2009:030 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html XForce ISS Database: linux-kernel-dosplicefrom-security-bypass(45954) https://exchange.xforce.ibmcloud.com/vulnerabilities/45954 Common Vulnerability Exposure (CVE) ID: CVE-2008-4576 BugTraq ID: 31634 http://www.securityfocus.com/bid/31634 http://www.gossamer-threads.com/lists/linux/kernel/981012?page=last http://permalink.gmane.org/gmane.comp.security.oss.general/1039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9822 SuSE Security Announcement: SUSE-SA:2008:052 (Google Search) SuSE Security Announcement: SUSE-SR:2008:025 (Google Search) XForce ISS Database: linux-kernel-sctp-initack-dos(45773) https://exchange.xforce.ibmcloud.com/vulnerabilities/45773
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.