Detections
Analytics

RHEL 2.1 : semi (RHSA-2004:344)

low Nessus Plugin ID 14311

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated semi packages that fix vulnerabilities in flim temporary file handling are now available.

The semi package includes a MIME library for GNU Emacs and XEmacs used by the wl mail package.

Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library for working with Internet messages included in the semi package.
Temporary files were being created without taking adequate precautions, and therefore a local user could potentially overwrite files with the privileges of the user running emacs. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0422 to this issue.

Users of semi are advised to upgrade to these packages, which contain a backported patch fixing this issue.

Solution

Update the affected semi and / or semi-xemacs packages.

See Also

https://access.redhat.com/security/cve/cve-2004-0422

https://www.debian.org/security/2004/dsa-500

https://access.redhat.com/errata/RHSA-2004:344

Plugin Details

Severity: Low

ID: 14311

File Name: redhat-RHSA-2004-344.nasl

Version: 1.30

Type: local

Agent: unix

Published: 8/18/2004

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Low

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:semi, p-cpe:/a:redhat:enterprise_linux:semi-xemacs, cpe:/o:redhat:enterprise_linux:2.1

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 8/18/2004

Vulnerability Publication Date: 7/7/2004

Reference Information

CVE: CVE-2004-0422

RHSA: 2004:344