vuln-list-alt/oval/c9f2/ALT-PU-2014-1941/definitions.json

{
  "Definition": [
    {
      "ID": "oval:org.altlinux.errata:def:20141941",
      "Version": "oval:org.altlinux.errata:def:20141941",
      "Class": "patch",
      "Metadata": {
        "Title": "ALT-PU-2014-1941: package `zabbix` update to version 2.2.5-alt1",
        "AffectedList": [
          {
            "Family": "unix",
            "Platforms": [
              "ALT Linux branch c9f2"
            ],
            "Products": [
              "ALT SPWorkstation",
              "ALT SPServer"
            ]
          }
        ],
        "References": [
          {
            "RefID": "ALT-PU-2014-1941",
            "RefURL": "https://errata.altlinux.org/ALT-PU-2014-1941",
            "Source": "ALTPU"
          },
          {
            "RefID": "BDU:2018-00371",
            "RefURL": "https://bdu.fstec.ru/vul/2018-00371",
            "Source": "BDU"
          },
          {
            "RefID": "CVE-2014-3005",
            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2014-3005",
            "Source": "CVE"
          }
        ],
        "Description": "This update upgrades zabbix to version 2.2.5-alt1. \nSecurity Fix(es):\n\n * BDU:2018-00371: Уязвимость универсальной системы мониторинга Zabbix, связанная с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю выполнить произвольный код или прочитать произвольные файлы\n\n * CVE-2014-3005: XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.\n\n * #30177: Изменить права на файлы юнитов systemd",
        "Advisory": {
          "From": "errata.altlinux.org",
          "Severity": "Critical",
          "Rights": "Copyright 2024 BaseALT Ltd.",
          "Issued": {
            "Date": "2014-07-18"
          },
          "Updated": {
            "Date": "2014-07-18"
          },
          "BDUs": [
            {
              "ID": "BDU:2018-00371",
              "CVSS": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "CWE": "CWE-611",
              "Href": "https://bdu.fstec.ru/vul/2018-00371",
              "Impact": "Critical",
              "Public": "20140614"
            }
          ],
          "CVEs": [
            {
              "ID": "CVE-2014-3005",
              "CVSS": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "CWE": "CWE-611",
              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2014-3005",
              "Impact": "Critical",
              "Public": "20180201"
            }
          ],
          "Bugzilla": [
            {
              "ID": "30177",
              "Href": "https://bugzilla.altlinux.org/30177",
              "Data": "Изменить права на файлы юнитов systemd"
            }
          ],
          "AffectedCPEs": {
            "CPEs": [
              "cpe:/o:alt:spworkstation:8.4",
              "cpe:/o:alt:spserver:8.4"
            ]
          }
        }
      },
      "Criteria": {
        "Operator": "AND",
        "Criterions": [
          {
            "TestRef": "oval:org.altlinux.errata:tst:4001",
            "Comment": "ALT Linux must be installed"
          }
        ],
        "Criterias": [
          {
            "Operator": "OR",
            "Criterions": [
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941001",
                "Comment": "zabbix-agent is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941002",
                "Comment": "zabbix-agent-sudo is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941003",
                "Comment": "zabbix-common is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941004",
                "Comment": "zabbix-contrib is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941005",
                "Comment": "zabbix-doc is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941006",
                "Comment": "zabbix-phpfrontend-apache is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941007",
                "Comment": "zabbix-phpfrontend-apache2 is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941008",
                "Comment": "zabbix-phpfrontend-apache2-mod_php5 is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941009",
                "Comment": "zabbix-phpfrontend-engine is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941010",
                "Comment": "zabbix-phpfrontend-php5 is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941011",
                "Comment": "zabbix-proxy is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941012",
                "Comment": "zabbix-server-common is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941013",
                "Comment": "zabbix-server-mysql is earlier than 1:2.2.5-alt1"
              },
              {
                "TestRef": "oval:org.altlinux.errata:tst:20141941014",
                "Comment": "zabbix-server-pgsql is earlier than 1:2.2.5-alt1"
              }
            ]
          }
        ]
      }
    }
  ]
}