Test ID:	1.3.6.1.4.1.25623.1.0.880698
Category:	CentOS Local Security Checks
Title:	CentOS Update for acpid CESA-2009:0474 centos5 i386
Summary:	The remote host is missing an update for the 'acpid'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'acpid' package(s) announced via the referenced advisory. Vulnerability Insight: acpid is a daemon that dispatches ACPI (Advanced Configuration and Power Interface) events to user-space programs. Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw in the acpid daemon's error handling. If an attacker could exhaust the sockets open to acpid, the daemon would enter an infinite loop, consuming most CPU resources and preventing acpid from communicating with legitimate processes. (CVE-2009-0798) Users are advised to upgrade to this updated package, which contains a backported patch to correct this issue. Affected Software/OS: acpid on CentOS 5 Solution: Please install the updated packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0798 1022182 http://www.securitytracker.com/id?1022182 34692 http://www.securityfocus.com/bid/34692 34838 http://secunia.com/advisories/34838 34914 http://secunia.com/advisories/34914 34918 http://secunia.com/advisories/34918 35010 http://secunia.com/advisories/35010 35209 http://secunia.com/advisories/35209 35231 http://secunia.com/advisories/35231 DSA-1786 http://www.debian.org/security/2009/dsa-1786 FEDORA-2009-5578 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html FEDORA-2009-5608 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html GLSA-200905-06 http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml MDVSA-2009:107 http://www.mandriva.com/security/advisories?name=MDVSA-2009:107 RHSA-2009:0474 http://www.redhat.com/support/errata/RHSA-2009-0474.html USN-766-1 http://www.ubuntu.com/usn/USN-766-1 acpid-socket-dos(50060) https://exchange.xforce.ibmcloud.com/vulnerabilities/50060 https://bugzilla.redhat.com/show_bug.cgi?id=494443 https://bugzilla.redhat.com/show_bug.cgi?id=502583 oval:org.mitre.oval:def:7560 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560 oval:org.mitre.oval:def:9955 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.