Detections
Analytics
Oracle Linux 3 / 4 / 5 : ed (ELSA-2008-0946)
high Nessus Plugin ID 67757
Language:
Synopsis
The remote Oracle Linux host is missing a security update.Description
From Red Hat Security Advisory 2008:0946 :An updated ed package that fixes one security issue is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5.
This update has been rated as having moderate security impact by the Red Hat Security Response Team.
ed is a line-oriented text editor, used to create, display, and modify text files (both interactively and via shell scripts).
A heap-based buffer overflow was discovered in the way ed, the GNU line editor, processed long file names. An attacker could create a file with a specially crafted name that could possibly execute an arbitrary code when opened in the ed editor. (CVE-2008-3916)
Users of ed should upgrade to this updated package, which contains a backported patch to resolve this issue.
Solution
Update the affected ed package.See Also
https://oss.oracle.com/pipermail/el-errata/2008-October/000768.html
https://oss.oracle.com/pipermail/el-errata/2008-October/000770.html
https://oss.oracle.com/pipermail/el-errata/2008-October/000772.html
Plugin Details
Severity: High
ID: 67757
File Name: oraclelinux_ELSA-2008-0946.nasl
Version: 1.9
Type: local
Agent: unix
Published: 7/12/2013
Updated: 1/14/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:oracle:linux:ed, cpe:/o:oracle:linux:3, cpe:/o:oracle:linux:4, cpe:/o:oracle:linux:5
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux
Patch Publication Date: 10/22/2008
Vulnerability Publication Date: 9/4/2008
Reference Information
CVE: CVE-2008-3916