Test ID:	1.3.6.1.4.1.25623.1.0.62971
Category:	CentOS Local Security Checks
Title:	CentOS Security Advisory CESA-2008:0973 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates to kernel announced in advisory CESA-2008:0973. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. http://www.securityspace.com/smysecure/catid.html?in=CESA-2008:0973 http://www.securityspace.com/smysecure/catid.html?in=RHSA-2008:0973 https://rhn.redhat.com/errata/RHSA-2008-0973.html Risk factor : High CVSS Score: 7.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4210 BugTraq ID: 31368 http://www.securityfocus.com/bid/31368 Debian Security Information: DSA-1653 (Google Search) http://www.debian.org/security/2008/dsa-1653 http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 http://www.openwall.com/lists/oss-security/2008/09/24/5 http://www.openwall.com/lists/oss-security/2008/09/24/8 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511 http://www.redhat.com/support/errata/RHSA-2008-0787.html http://www.redhat.com/support/errata/RHSA-2008-0957.html RedHat Security Advisories: RHSA-2008:0972 http://rhn.redhat.com/errata/RHSA-2008-0972.html http://www.redhat.com/support/errata/RHSA-2008-0973.html http://secunia.com/advisories/32237 http://secunia.com/advisories/32344 http://secunia.com/advisories/32356 http://secunia.com/advisories/32485 http://secunia.com/advisories/32759 http://secunia.com/advisories/32799 http://secunia.com/advisories/32918 http://secunia.com/advisories/33201 http://secunia.com/advisories/33280 SuSE Security Announcement: SUSE-SA:2008:051 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html SuSE Security Announcement: SUSE-SA:2008:056 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html SuSE Security Announcement: SUSE-SA:2008:057 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html SuSE Security Announcement: SUSE-SR:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://www.ubuntu.com/usn/usn-679-1 XForce ISS Database: linux-kernel-open-privilege-escalation(45539) https://exchange.xforce.ibmcloud.com/vulnerabilities/45539 Common Vulnerability Exposure (CVE) ID: CVE-2008-3275 1020739 http://www.securitytracker.com/id?1020739 30647 http://www.securityfocus.com/bid/30647 31551 http://secunia.com/advisories/31551 31614 http://secunia.com/advisories/31614 31836 http://secunia.com/advisories/31836 31881 http://secunia.com/advisories/31881 32023 http://secunia.com/advisories/32023 32104 http://secunia.com/advisories/32104 32190 http://secunia.com/advisories/32190 32344 33201 33280 33556 http://secunia.com/advisories/33556 ADV-2008-2430 http://www.vupen.com/english/advisories/2008/2430 DSA-1630 http://www.debian.org/security/2008/dsa-1630 DSA-1636 http://www.debian.org/security/2008/dsa-1636 MDVSA-2008:220 RHSA-2008:0787 RHSA-2008:0857 http://www.redhat.com/support/errata/RHSA-2008-0857.html RHSA-2008:0885 http://www.redhat.com/support/errata/RHSA-2008-0885.html RHSA-2008:0973 RHSA-2009:0014 http://www.redhat.com/support/errata/RHSA-2009-0014.html SUSE-SA:2008:048 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html SUSE-SA:2008:049 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html USN-637-1 https://usn.ubuntu.com/637-1/ [linux-kernel] 20080702 Is VFS behavior fine? http://lkml.org/lkml/2008/7/2/83 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15 https://bugzilla.redhat.com/show_bug.cgi?id=457858 linux-kernel-ubifs-dos(44410) https://exchange.xforce.ibmcloud.com/vulnerabilities/44410 oval:org.mitre.oval:def:10744 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744 oval:org.mitre.oval:def:6551 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551 Common Vulnerability Exposure (CVE) ID: CVE-2008-0598 1020367 http://www.securitytracker.com/id?1020367 29942 http://www.securityfocus.com/bid/29942 30849 http://secunia.com/advisories/30849 30850 http://secunia.com/advisories/30850 31107 http://secunia.com/advisories/31107 32103 http://secunia.com/advisories/32103 33586 http://secunia.com/advisories/33586 RHSA-2008:0508 http://rhn.redhat.com/errata/RHSA-2008-0508.html RHSA-2008:0519 http://www.redhat.com/support/errata/RHSA-2008-0519.html RHSA-2009:0009 http://www.redhat.com/support/errata/RHSA-2009-0009.html SUSE-SA:2008:047 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html USN-625-1 http://www.ubuntu.com/usn/usn-625-1 https://bugzilla.redhat.com/show_bug.cgi?id=433938 linux-kernel-emulation-disclosure(43554) https://exchange.xforce.ibmcloud.com/vulnerabilities/43554 oval:org.mitre.oval:def:10721 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10721 oval:org.mitre.oval:def:6201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6201 Common Vulnerability Exposure (CVE) ID: CVE-2008-2136 BugTraq ID: 29235 http://www.securityfocus.com/bid/29235 Debian Security Information: DSA-1588 (Google Search) http://www.debian.org/security/2008/dsa-1588 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 http://marc.info/?l=linux-netdev&m=121031533024912&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503 http://www.redhat.com/support/errata/RHSA-2008-0585.html http://www.redhat.com/support/errata/RHSA-2008-0607.html http://www.redhat.com/support/errata/RHSA-2008-0612.html http://www.securitytracker.com/id?1020118 http://secunia.com/advisories/30198 http://secunia.com/advisories/30241 http://secunia.com/advisories/30276 http://secunia.com/advisories/30368 http://secunia.com/advisories/30499 http://secunia.com/advisories/30818 http://secunia.com/advisories/30962 http://secunia.com/advisories/31198 http://secunia.com/advisories/31341 http://secunia.com/advisories/31628 http://secunia.com/advisories/31689 SuSE Security Announcement: SUSE-SA:2008:030 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html SuSE Security Announcement: SUSE-SA:2008:032 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html http://www.vupen.com/english/advisories/2008/1543/references http://www.vupen.com/english/advisories/2008/1716/references XForce ISS Database: linux-kernel-ipip6rcv-dos(42451) https://exchange.xforce.ibmcloud.com/vulnerabilities/42451 Common Vulnerability Exposure (CVE) ID: CVE-2008-2812 30076 http://www.securityfocus.com/bid/30076 30982 http://secunia.com/advisories/30982 31048 http://secunia.com/advisories/31048 31202 http://secunia.com/advisories/31202 31229 http://secunia.com/advisories/31229 31341 31685 http://secunia.com/advisories/31685 32370 http://secunia.com/advisories/32370 32759 ADV-2008-2063 http://www.vupen.com/english/advisories/2008/2063/references RHSA-2008:0612 RHSA-2008:0665 http://www.redhat.com/support/errata/RHSA-2008-0665.html SUSE-SA:2008:035 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html SUSE-SA:2008:037 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html SUSE-SA:2008:038 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html SUSE-SA:2008:052 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html SUSE-SR:2008:025 [oss-security] 20080703 2.6.25.10 security fixes, please assign CVE id http://www.openwall.com/lists/oss-security/2008/07/03/2 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f329dce788 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10 http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm kernel-tty-dos(43687) https://exchange.xforce.ibmcloud.com/vulnerabilities/43687 oval:org.mitre.oval:def:11632 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632 oval:org.mitre.oval:def:6633 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633 Common Vulnerability Exposure (CVE) ID: CVE-2007-6063 BugTraq ID: 26605 http://www.securityfocus.com/bid/26605 Debian Security Information: DSA-1436 (Google Search) http://www.debian.org/security/2007/dsa-1436 Debian Security Information: DSA-1503 (Google Search) http://www.debian.org/security/2008/dsa-1503 Debian Security Information: DSA-1504 (Google Search) http://www.debian.org/security/2008/dsa-1504 http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846 RedHat Security Advisories: RHSA-2008:0055 http://rhn.redhat.com/errata/RHSA-2008-0055.html http://www.redhat.com/support/errata/RHSA-2008-0154.html http://secunia.com/advisories/27842 http://secunia.com/advisories/27912 http://secunia.com/advisories/28141 http://secunia.com/advisories/28706 http://secunia.com/advisories/28748 http://secunia.com/advisories/28806 http://secunia.com/advisories/28971 http://secunia.com/advisories/29058 http://secunia.com/advisories/29236 SuSE Security Announcement: SUSE-SA:2007:064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html SuSE Security Announcement: SUSE-SA:2008:006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html http://www.ubuntu.com/usn/usn-574-1 http://www.ubuntu.com/usn/usn-578-1 http://www.vupen.com/english/advisories/2007/4046 Common Vulnerability Exposure (CVE) ID: CVE-2008-3525 1020969 http://www.securitytracker.com/id?1020969 32237 32315 http://secunia.com/advisories/32315 32356 32386 http://secunia.com/advisories/32386 32393 http://secunia.com/advisories/32393 ADV-2008-2511 http://www.vupen.com/english/advisories/2008/2511 ADV-2008-2714 http://www.vupen.com/english/advisories/2008/2714 DSA-1653 DSA-1655 http://www.debian.org/security/2008/dsa-1655 FEDORA-2008-8929 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html FEDORA-2008-8980 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html MDVSA-2008:223 http://www.mandriva.com/security/advisories?name=MDVSA-2008:223 SUSE-SA:2008:051 SUSE-SA:2008:053 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html USN-659-1 http://www.ubuntu.com/usn/usn-659-1 [oss-security] 20080829 CVE-2008-3525 kernel: missing capability checks in sbni_ioctl() http://www.openwall.com/lists/oss-security/2008/08/29/2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7 oval:org.mitre.oval:def:5671 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671 oval:org.mitre.oval:def:9364 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.