Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Fedora Local Security Checks >> Fedora Core 2 2004-137: kernel

Fedora Core 2 2004-137: kernel

Vulnerability Assessment Summary Check for the version of the kernel package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory FEDORA-2004-137 (kernel). The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. Update Information: An updated kernel is available that brings the kernel to the 2.6.7-rc3 base level. This new kernel provides a significant number of bug fixes and improvements for USB, the keyboard/mouse subsystem and the VM. This kernel also fixes the high profile bugs about not working on VIA C3 processors (#120685) and Asus P4P800 motherboards (#121819). In this new kernel firewire no longer oopses during boot and has been re-enabled, however we consider firewire support still somewhat experimental and recommend extensive testing before using firewire in a production environment. This kernel also contains the enhancements series from Al Viro that enables the Sparse source code checking tool to check for a certain class kernel bugs. This class of bugs can lead to privilege escalation vulnerabilities, and fixes for all such bugs that were found with Sparse and these patches are included in this erratum. In addition to these bugfixes, the x86 kernel-smp subpackage now also contains support for the 'NX' feature that is present in current AMD Athlon64/Opteron processors and for which support has been announced by Intel, VIA and Transmeta for future processors. Solution : http://www.fedoranews.org/updates/FEDORA-2004-137.shtml Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

Dell PowerEdge R710 2x X5670 2.93GHz 6 Core 96GB 6x 1TB 7.2K SATA PERC 6/i $1005.0

Intel Xeon E5-2428L 1.8GHz (2.0GHz Turbo) 15MB 7.2GT/s SR0M3 CPU Processor $18.95

Dell PowerEdge R720 2x E5-2620 2.0GHz 6 Core 48GB 8x 3TB 7.2K SAS H710 $2550.0

Dell PowerEdge R710 2x X5570 2.93GHz Quad Core 48GB 6x 600GB 15K SAS PERC 6/i $1460.0

Discussions

No Discussions have been posted on this vulnerability.