Test ID:	1.3.6.1.4.1.25623.1.0.63948
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:0474
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:0474.;;acpid is a daemon that dispatches ACPI (Advanced Configuration and Power;Interface) events to user-space programs.;;Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw;in the acpid daemon's error handling. If an attacker could exhaust the;sockets open to acpid, the daemon would enter an infinite loop, consuming;most CPU resources and preventing acpid from communicating with legitimate;processes. (CVE-2009-0798);;Users are advised to upgrade to this updated package, which contains a;backported patch to correct this issue.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:0474. acpid is a daemon that dispatches ACPI (Advanced Configuration and Power Interface) events to user-space programs. Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw in the acpid daemon's error handling. If an attacker could exhaust the sockets open to acpid, the daemon would enter an infinite loop, consuming most CPU resources and preventing acpid from communicating with legitimate processes. (CVE-2009-0798) Users are advised to upgrade to this updated package, which contains a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0798 1022182 http://www.securitytracker.com/id?1022182 34692 http://www.securityfocus.com/bid/34692 34838 http://secunia.com/advisories/34838 34914 http://secunia.com/advisories/34914 34918 http://secunia.com/advisories/34918 35010 http://secunia.com/advisories/35010 35209 http://secunia.com/advisories/35209 35231 http://secunia.com/advisories/35231 DSA-1786 http://www.debian.org/security/2009/dsa-1786 FEDORA-2009-5578 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html FEDORA-2009-5608 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html GLSA-200905-06 http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml MDVSA-2009:107 http://www.mandriva.com/security/advisories?name=MDVSA-2009:107 RHSA-2009:0474 http://www.redhat.com/support/errata/RHSA-2009-0474.html USN-766-1 http://www.ubuntu.com/usn/USN-766-1 acpid-socket-dos(50060) https://exchange.xforce.ibmcloud.com/vulnerabilities/50060 https://bugzilla.redhat.com/show_bug.cgi?id=494443 https://bugzilla.redhat.com/show_bug.cgi?id=502583 oval:org.mitre.oval:def:7560 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560 oval:org.mitre.oval:def:9955 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.