Vulnerabilities > CVE-2012-3420 - Resource Management Errors vulnerability in SGI Performance Co-Pilot

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
sgi
CWE-399
nessus

Summary

Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.

Common Weakness Enumeration (CWE)

Nessus

  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2012-542.NASL
    description - Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; (bnc#775009). + Workaround for security advisory CVE-2012-3419; (bnc#775010). + Fixes for security advisory CVE-2012-3420; (bnc#775011). + Fixes for security advisory CVE-2012-3421; (bnc#775013).
    last seen2020-06-05
    modified2014-06-13
    plugin id74734
    published2014-06-13
    reporterThis script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/74734
    titleopenSUSE Security Update : pcp (openSUSE-SU-2012:1081-1)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from openSUSE Security Update openSUSE-2012-542.
    #
    # The text description of this plugin is (C) SUSE LLC.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(74734);
      script_version("1.3");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04");
    
      script_cve_id("CVE-2012-3418", "CVE-2012-3419", "CVE-2012-3420", "CVE-2012-3421");
    
      script_name(english:"openSUSE Security Update : pcp (openSUSE-SU-2012:1081-1)");
      script_summary(english:"Check for the openSUSE-2012-542 patch");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote openSUSE host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "  - Update to pcp-3.6.5.
    
      + Fixes for security advisory CVE-2012-3418; (bnc#775009).
    
      + Workaround for security advisory CVE-2012-3419;
        (bnc#775010).
    
      + Fixes for security advisory CVE-2012-3420; (bnc#775011).
    
      + Fixes for security advisory CVE-2012-3421; (bnc#775013)."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775009"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775010"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775011"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775013"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://lists.opensuse.org/opensuse-updates/2012-09/msg00002.html"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected pcp packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpcp-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpcp-devel-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpcp3");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpcp3-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp-debugsource");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp-import-iostat2pcp");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp-import-mrtg2pcp");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp-import-sar2pcp");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pcp-import-sheet2pcp");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-LogImport");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-LogImport-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-LogSummary");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-MMV");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-MMV-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-PMDA");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-PCP-PMDA-debuginfo");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:11.4");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2012/08/22");
      script_set_attribute(attribute:"plugin_publication_date", value:"2014/06/13");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/SuSE/release");
    if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
    if (release !~ "^(SUSE11\.4)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "11.4", release);
    if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    ourarch = get_kb_item("Host/cpu");
    if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
    if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);
    
    flag = 0;
    
    if ( rpm_check(release:"SUSE11.4", reference:"libpcp-devel-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"libpcp-devel-debuginfo-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"libpcp3-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"libpcp3-debuginfo-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-debuginfo-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-debugsource-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-import-iostat2pcp-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-import-mrtg2pcp-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-import-sar2pcp-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"pcp-import-sheet2pcp-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-LogImport-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-LogImport-debuginfo-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-LogSummary-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-MMV-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-MMV-debuginfo-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-PMDA-3.6.5-140.1") ) flag++;
    if ( rpm_check(release:"SUSE11.4", reference:"perl-PCP-PMDA-debuginfo-3.6.5-140.1") ) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "pcp");
    }
    
  • NASL familySuSE Local Security Checks
    NASL idSUSE_11_LIBPCP3-130107.NASL
    descriptionpcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. - Transition daemons to run under an unprivileged account. - Fixes for security advisory CVE-2012-5530: tmpfile flaws;. (bnc#782967) - Fix pcp(1) command short-form pmlogger reporting. - Fix pmdalogger error handling for directory files. - Fix pmstat handling of odd corner case in CPU metrics. - Correct the python ctype used for pmAtomValue 32bit ints. - Add missing RPM spec dependency for python-ctypes. - Corrections to pmdamysql metrics units. - Add pmdamysql slave status metrics. - Improve pmcollectl error messages. - Parameterize pmcollectl CPU counts in interrupt subsys. - Fix generic RPM packaging for powerpc builds. - Fix python API use of reentrant libpcp string routines. - Python code backporting for RHEL5 in qa and pmcollectl. - Fix edge cases in capturing interrupt error counts. - Update to pcp-3.6.9. - Python wrapper for the pmimport API - Make sar2pcp work with the sysstat versions from RHEL5, RHEL6, and all recent Fedora versions (which is almost all current versions of sysstat verified). - Added a number of additional metrics into the importer for people starting to use it to analyse sar data from real customer incidents. - Rework use of C99
    last seen2020-06-05
    modified2013-01-25
    plugin id64188
    published2013-01-25
    reporterThis script is Copyright (C) 2013-2020 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/64188
    titleSuSE 11.2 Security Update : pcp (SAT Patch Number 7221)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from SuSE 11 update information. The text itself is
    # copyright (C) Novell, Inc.
    #
    
    if (NASL_LEVEL < 3000) exit(0);
    
    include("compat.inc");
    
    if (description)
    {
      script_id(64188);
      script_version("1.3");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04");
    
      script_cve_id("CVE-2012-3418", "CVE-2012-3419", "CVE-2012-3420", "CVE-2012-3421", "CVE-2012-5530");
    
      script_name(english:"SuSE 11.2 Security Update : pcp (SAT Patch Number 7221)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote SuSE 11 host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "pcp was updated to version 3.6.10 which fixes security issues and also
    brings a lot of new features.
    
      - Update to pcp-3.6.10.
    
      - Transition daemons to run under an unprivileged account.
    
      - Fixes for security advisory CVE-2012-5530: tmpfile
        flaws;. (bnc#782967)
    
      - Fix pcp(1) command short-form pmlogger reporting.
    
      - Fix pmdalogger error handling for directory files.
    
      - Fix pmstat handling of odd corner case in CPU metrics.
    
      - Correct the python ctype used for pmAtomValue 32bit
        ints.
    
      - Add missing RPM spec dependency for python-ctypes.
    
      - Corrections to pmdamysql metrics units.
    
      - Add pmdamysql slave status metrics.
    
      - Improve pmcollectl error messages.
    
      - Parameterize pmcollectl CPU counts in interrupt subsys.
    
      - Fix generic RPM packaging for powerpc builds.
    
      - Fix python API use of reentrant libpcp string routines.
    
      - Python code backporting for RHEL5 in qa and pmcollectl.
    
      - Fix edge cases in capturing interrupt error counts.
    
      - Update to pcp-3.6.9.
    
      - Python wrapper for the pmimport API
    
      - Make sar2pcp work with the sysstat versions from RHEL5,
        RHEL6, and all recent Fedora versions (which is almost
        all current versions of sysstat verified).
    
      - Added a number of additional metrics into the importer
        for people starting to use it to analyse sar data from
        real customer incidents.
    
      - Rework use of C99 'restrict' keyword in pmdalogger
        (Debian bug: 689552)
    
      - Alot of work on the PCP QA suite, special thanks to
        Tomas Dohnalek for all his efforts there.
    
      - Win32 build updates
    
      - Add 'raw' disk active metrics so that existing tools
        like iostat can be emulated
    
      - Allow sar2pcp to accept XML input directly (.xml
        suffix), allowing it to not have to run on the same
        platform as the sadc/sadf that originally generated it.
    
      - Add PMI error codes into the PCP::LogImport perl module.
    
      - Fix a typo in pmiUnits man page synopsis section
    
      - Resolve pmdalinux ordering issue in NUMA/CPU indom setup
        (Redhat bug: 858384)
    
      - Remove unused pmcollectl imports (Redhat bug: 863210)
    
      - Allow event traces to be used in libpcp interpolate mode
    
      - Update to pcp-3.6.8.
    
      - Corrects the disk/partition identification for the MMC
        driver, which makes disk indom handling correct on the
        Raspberry Pi (http://www.raspberrypi.org/)
    
      - Several minor/basic fixes for pmdaoracle.
    
      - Improve pmcollectl compatibility.
    
      - Make a few clarifications to pmcollectl.1.
    
      - Improve python API test coverage.
    
      - Numerous updates to the test suite in general.
    
      - Allow pmda Install scripts to specify own dso name
        again.
    
      - Reconcile spec file differences between PCP flavours.
    
      - Fix handling of multiple contexts with a remote
        namespace.
    
      - Core socket interface abstractions to support NSS
        (later).
    
      - Fix man page SYNOPSIS section for pmUnpackEventRecords.
    
      - Add --disable-shared build option for static builds.
    
      - Update to pcp-3.6.6.
    
      - Added the python PMAPI bindings and an initial python
        client in pmcollectl. Separate, new package exists for
        python libs for those platforms that split out packages
        (rpm, deb).
    
      - Added a pcp-testsuite package for those platforms that
        might want this (rpm, deb again, mainly)
    
      - Re-introduced the pcp/qa subdirectory in pcp and
        deprecated the external pcpqa git tree.
    
      - Fix potential buffer overflow in pmlogger host name
        handling.
    
      - Reworked the configure --prefix handling to be more like
        the rest of the open source world.
    
      - Ensure the __pmDecodeText ident parameter is always set
        Resolves Red Hat bugzilla bug #841306."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=732763"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775009"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775010"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775011"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=775013"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=782967"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2012-3418.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2012-3419.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2012-3420.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2012-3421.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2012-5530.html"
      );
      script_set_attribute(attribute:"solution", value:"Apply SAT patch number 7221.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:permissions");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:11");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2013/01/07");
      script_set_attribute(attribute:"plugin_publication_date", value:"2013/01/25");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2013-2020 Tenable Network Security, Inc.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/SuSE/release");
    if (isnull(release) || release !~ "^(SLED|SLES)11") audit(AUDIT_OS_NOT, "SuSE 11");
    if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SuSE 11", cpu);
    
    pl = get_kb_item("Host/SuSE/patchlevel");
    if (isnull(pl) || int(pl) != 2) audit(AUDIT_OS_NOT, "SuSE 11.2");
    
    
    flag = 0;
    if (rpm_check(release:"SLED11", sp:2, cpu:"i586", reference:"permissions-2013.1.7-0.3.1")) flag++;
    if (rpm_check(release:"SLED11", sp:2, cpu:"x86_64", reference:"permissions-2013.1.7-0.3.1")) flag++;
    if (rpm_check(release:"SLES11", sp:2, reference:"permissions-2013.1.7-0.3.1")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2012-12076.NASL
    descriptionSecurity and bugfix update. Security flaws fixed include CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-03-17
    modified2012-08-21
    plugin id61602
    published2012-08-21
    reporterThis script is Copyright (C) 2012-2020 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/61602
    titleFedora 17 : pcp-3.6.5-1.fc17 (2012-12076)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Fedora Security Advisory 2012-12076.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(61602);
      script_version("1.10");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/12");
    
      script_cve_id("CVE-2012-3418", "CVE-2012-3419", "CVE-2012-3420", "CVE-2012-3421");
      script_bugtraq_id(55041);
      script_xref(name:"FEDORA", value:"2012-12076");
    
      script_name(english:"Fedora 17 : pcp-3.6.5-1.fc17 (2012-12076)");
      script_summary(english:"Checks rpm output for the updated package.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Fedora host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Security and bugfix update. Security flaws fixed include CVE-2012-3418
    CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Fedora security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=841698"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=841702"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=841704"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=841706"
      );
      # https://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?8fb07a95"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected pcp package.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:pcp");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:17");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2012/08/17");
      script_set_attribute(attribute:"plugin_publication_date", value:"2012/08/21");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2012-2020 Tenable Network Security, Inc.");
      script_family(english:"Fedora Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
    os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
    os_ver = os_ver[1];
    if (! ereg(pattern:"^17([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 17.x", "Fedora " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
    
    flag = 0;
    if (rpm_check(release:"FC17", reference:"pcp-3.6.5-1.fc17")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "pcp");
    }
    
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2012-544.NASL
    descriptionUpdate to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; (bnc#775009). + Workaround for security advisory CVE-2012-3419; (bnc#775010). + Fixes for security advisory CVE-2012-3420; (bnc#775011). + Fixes for security advisory CVE-2012-3421; (bnc#775013).
    last seen2020-06-05
    modified2014-06-13
    plugin id74736
    published2014-06-13
    reporterThis script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/74736
    titleopenSUSE Security Update : pcp (openSUSE-SU-2012:1079-1)
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DSA-2533.NASL
    descriptionIt was discovered that Performance Co-Pilot (pcp), a framework for performance monitoring, contains several vulnerabilities. - CVE-2012-3418 Multiple buffer overflows in the PCP protocol decoders can cause PCP clients and servers to crash or, potentially, execute arbitrary code while processing crafted PDUs. - CVE-2012-3419 The
    last seen2020-03-17
    modified2012-08-24
    plugin id61652
    published2012-08-24
    reporterThis script is Copyright (C) 2012-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/61652
    titleDebian DSA-2533-1 : pcp - several vulnerabilities
  • NASL familySuSE Local Security Checks
    NASL idSUSE_LIBPCP3-8421.NASL
    descriptionpcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. o Transition daemons to run under an unprivileged account. o Fixes for security advisory CVE-2012-5530: tmpfile flaws; (bnc#782967). o Fix pcp(1) command short-form pmlogger reporting. o Fix pmdalogger error handling for directory files. o Fix pmstat handling of odd corner case in CPU metrics. o Correct the python ctype used for pmAtomValue 32bit ints. o Add missing RPM spec dependency for python-ctypes. o Corrections to pmdamysql metrics units. o Add pmdamysql slave status metrics. o Improve pmcollectl error messages. o Parameterize pmcollectl CPU counts in interrupt subsys. o Fix generic RPM packaging for powerpc builds. o Fix python API use of reentrant libpcp string routines. o Python code backporting for RHEL5 in qa and pmcollectl. o Fix edge cases in capturing interrupt error counts. - Update to pcp-3.6.9. o Python wrapper for the pmimport API o Make sar2pcp work with the sysstat versions from RHEL5, RHEL6, and all recent Fedora versions (which is almost all current versions of sysstat verified). o Added a number of additional metrics into the importer for people starting to use it to analyse sar data from real customer incidents. o Rework use of C99
    last seen2020-06-05
    modified2013-01-24
    plugin id63680
    published2013-01-24
    reporterThis script is Copyright (C) 2013-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/63680
    titleSuSE 10 Security Update : pcp (ZYPP Patch Number 8421)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2012-11988.NASL
    descriptionSecurity and bugfix update. Security flaws fixed include CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-03-17
    modified2012-09-18
    plugin id62132
    published2012-09-18
    reporterThis script is Copyright (C) 2012-2020 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/62132
    titleFedora 18 : pcp-3.6.5-1.fc18 (2012-11988)
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2012-525.NASL
    descriptionUpdate to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; (bnc#775009). + Workaround for security advisory CVE-2012-3419; (bnc#775010). + Fixes for security advisory CVE-2012-3420; (bnc#775011). + Fixes for security advisory CVE-2012-3421; (bnc#775013).
    last seen2020-06-05
    modified2014-06-13
    plugin id74719
    published2014-06-13
    reporterThis script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/74719
    titleopenSUSE Security Update : pcp (openSUSE-SU-2012:1036-1)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2012-12024.NASL
    descriptionSecurity and bugfix update. Security flaws fixed include CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-03-17
    modified2012-08-21
    plugin id61601
    published2012-08-21
    reporterThis script is Copyright (C) 2012-2020 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/61601
    titleFedora 16 : pcp-3.6.5-1.fc16 (2012-12024)