Test ID:	1.3.6.1.4.1.25623.1.0.62825
Category:	Fedora Local Security Checks
Title:	Fedora Core 10 FEDORA-2008-10879 (syslog-ng)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to syslog-ng announced via advisory FEDORA-2008-10879. syslog-ng, as the name shows, is a syslogd replacement, but with new functionality for the new generation. The original syslogd allows messages only to be sorted based on priority/facility pairs syslog-ng adds the possibility to filter based on message contents using regular expressions. The new configuration scheme is intuitive and powerful. Forwarding logs over TCP and remembering all forwarding hops makes it ideal for firewalled environments. Update Information: Fixes CVE-2008-5110 ChangeLog: * Tue Dec 2 2008 Douglas E. Warner 2.0.10-1 - update to 2.0.10 - fix for CVE-2008-5110 References: [ 1 ] Bug #471984 - CVE-2008-5110 syslog-ng improper chroot https://bugzilla.redhat.com/show_bug.cgi?id=471984 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update syslog-ng' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-10879 Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5110 35748 http://secunia.com/advisories/35748 40551 http://secunia.com/advisories/40551 ADV-2010-1796 http://www.vupen.com/english/advisories/2010/1796 GLSA-200907-10 http://security.gentoo.org/glsa/glsa-200907-10.xml HPSBMA02554 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 SSRT100018 [oss-security] 20081117 CVE Request (syslog-ng) http://www.openwall.com/lists/oss-security/2008/11/17/3 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.