Debian DLA-1669-1 : libreoffice security update - Nessus
Critical Plugin ID: 122067This page contains detailed information about the Debian DLA-1669-1 : libreoffice security update Nessus plugin including available exploits and PoCs found on GitHub, in Metasploit or Exploit-DB for verifying of this vulnerability.
Plugin Overview
ID: 122067
Name: Debian DLA-1669-1 : libreoffice security update
Filename: debian_DLA-1669.nasl
Vulnerability Published: 2019-03-25
This Plugin Published: 2019-02-11
Last Modification Time: 2021-01-11
Plugin Version: 1.7
Plugin Type: local
Plugin Family: Debian Local Security Checks
Dependencies:
ssh_get_info.nasl
Required KB Items [?]: Host/Debian/dpkg-l, Host/Debian/release, Host/local_checks_enabled
Vulnerability Information
Severity: Critical
Vulnerability Published: 2019-03-25
Patch Published: 2019-02-08
CVE [?]: CVE-2018-16858
CPE [?]: cpe:/o:debian:debian_linux:8.0, p-cpe:/a:debian:debian_linux:browser-plugin-libreoffice, p-cpe:/a:debian:debian_linux:fonts-opensymbol, p-cpe:/a:debian:debian_linux:libreoffice, p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-gstreamer, p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-vlc, p-cpe:/a:debian:debian_linux:libreoffice-base, p-cpe:/a:debian:debian_linux:libreoffice-base-core, p-cpe:/a:debian:debian_linux:libreoffice-base-drivers, p-cpe:/a:debian:debian_linux:libreoffice-calc, p-cpe:/a:debian:debian_linux:libreoffice-common, p-cpe:/a:debian:debian_linux:libreoffice-core, p-cpe:/a:debian:debian_linux:libreoffice-dbg, p-cpe:/a:debian:debian_linux:libreoffice-dev, p-cpe:/a:debian:debian_linux:libreoffice-dev-doc, p-cpe:/a:debian:debian_linux:libreoffice-draw, p-cpe:/a:debian:debian_linux:libreoffice-emailmerge, p-cpe:/a:debian:debian_linux:libreoffice-evolution, p-cpe:/a:debian:debian_linux:libreoffice-gnome, p-cpe:/a:debian:debian_linux:libreoffice-gtk, p-cpe:/a:debian:debian_linux:libreoffice-gtk3, p-cpe:/a:debian:debian_linux:libreoffice-help-ca, p-cpe:/a:debian:debian_linux:libreoffice-help-cs, p-cpe:/a:debian:debian_linux:libreoffice-help-da, p-cpe:/a:debian:debian_linux:libreoffice-help-de, p-cpe:/a:debian:debian_linux:libreoffice-help-dz, p-cpe:/a:debian:debian_linux:libreoffice-help-el, p-cpe:/a:debian:debian_linux:libreoffice-help-en-gb, p-cpe:/a:debian:debian_linux:libreoffice-help-en-us, p-cpe:/a:debian:debian_linux:libreoffice-help-es, p-cpe:/a:debian:debian_linux:libreoffice-help-et, p-cpe:/a:debian:debian_linux:libreoffice-help-eu, p-cpe:/a:debian:debian_linux:libreoffice-help-fi, p-cpe:/a:debian:debian_linux:libreoffice-help-fr, p-cpe:/a:debian:debian_linux:libreoffice-help-gl, p-cpe:/a:debian:debian_linux:libreoffice-help-hi, p-cpe:/a:debian:debian_linux:libreoffice-help-hu, p-cpe:/a:debian:debian_linux:libreoffice-help-it, p-cpe:/a:debian:debian_linux:libreoffice-help-ja, p-cpe:/a:debian:debian_linux:libreoffice-help-km, p-cpe:/a:debian:debian_linux:libreoffice-help-ko, p-cpe:/a:debian:debian_linux:libreoffice-help-nl, p-cpe:/a:debian:debian_linux:libreoffice-help-om, p-cpe:/a:debian:debian_linux:libreoffice-help-pl, p-cpe:/a:debian:debian_linux:libreoffice-help-pt, p-cpe:/a:debian:debian_linux:libreoffice-help-pt-br, p-cpe:/a:debian:debian_linux:libreoffice-help-ru, p-cpe:/a:debian:debian_linux:libreoffice-help-sk, p-cpe:/a:debian:debian_linux:libreoffice-help-sl, p-cpe:/a:debian:debian_linux:libreoffice-help-sv, p-cpe:/a:debian:debian_linux:libreoffice-help-tr, p-cpe:/a:debian:debian_linux:libreoffice-help-vi, p-cpe:/a:debian:debian_linux:libreoffice-help-zh-cn, p-cpe:/a:debian:debian_linux:libreoffice-help-zh-tw, p-cpe:/a:debian:debian_linux:libreoffice-impress, p-cpe:/a:debian:debian_linux:libreoffice-java-common, p-cpe:/a:debian:debian_linux:libreoffice-kde, p-cpe:/a:debian:debian_linux:libreoffice-l10n-af, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ar, p-cpe:/a:debian:debian_linux:libreoffice-l10n-as, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ast, p-cpe:/a:debian:debian_linux:libreoffice-l10n-be, p-cpe:/a:debian:debian_linux:libreoffice-l10n-bg, p-cpe:/a:debian:debian_linux:libreoffice-l10n-bn, p-cpe:/a:debian:debian_linux:libreoffice-l10n-br, p-cpe:/a:debian:debian_linux:libreoffice-l10n-bs, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ca, p-cpe:/a:debian:debian_linux:libreoffice-l10n-cs, p-cpe:/a:debian:debian_linux:libreoffice-l10n-cy, p-cpe:/a:debian:debian_linux:libreoffice-l10n-da, p-cpe:/a:debian:debian_linux:libreoffice-l10n-de, p-cpe:/a:debian:debian_linux:libreoffice-l10n-dz, p-cpe:/a:debian:debian_linux:libreoffice-l10n-el, p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-gb, p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-za, p-cpe:/a:debian:debian_linux:libreoffice-l10n-eo, p-cpe:/a:debian:debian_linux:libreoffice-l10n-es, p-cpe:/a:debian:debian_linux:libreoffice-l10n-et, p-cpe:/a:debian:debian_linux:libreoffice-l10n-eu, p-cpe:/a:debian:debian_linux:libreoffice-l10n-fa, p-cpe:/a:debian:debian_linux:libreoffice-l10n-fi, p-cpe:/a:debian:debian_linux:libreoffice-l10n-fr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ga, p-cpe:/a:debian:debian_linux:libreoffice-l10n-gd, p-cpe:/a:debian:debian_linux:libreoffice-l10n-gl, p-cpe:/a:debian:debian_linux:libreoffice-l10n-gu, p-cpe:/a:debian:debian_linux:libreoffice-l10n-he, p-cpe:/a:debian:debian_linux:libreoffice-l10n-hi, p-cpe:/a:debian:debian_linux:libreoffice-l10n-hr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-hu, p-cpe:/a:debian:debian_linux:libreoffice-l10n-id, p-cpe:/a:debian:debian_linux:libreoffice-l10n-in, p-cpe:/a:debian:debian_linux:libreoffice-l10n-is, p-cpe:/a:debian:debian_linux:libreoffice-l10n-it, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ja, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ka, p-cpe:/a:debian:debian_linux:libreoffice-l10n-kk, p-cpe:/a:debian:debian_linux:libreoffice-l10n-km, p-cpe:/a:debian:debian_linux:libreoffice-l10n-kmr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ko, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ku, p-cpe:/a:debian:debian_linux:libreoffice-l10n-lt, p-cpe:/a:debian:debian_linux:libreoffice-l10n-lv, p-cpe:/a:debian:debian_linux:libreoffice-l10n-mk, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ml, p-cpe:/a:debian:debian_linux:libreoffice-l10n-mn, p-cpe:/a:debian:debian_linux:libreoffice-l10n-mr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-nb, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ne, p-cpe:/a:debian:debian_linux:libreoffice-l10n-nl, p-cpe:/a:debian:debian_linux:libreoffice-l10n-nn, p-cpe:/a:debian:debian_linux:libreoffice-l10n-nr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-nso, p-cpe:/a:debian:debian_linux:libreoffice-l10n-oc, p-cpe:/a:debian:debian_linux:libreoffice-l10n-om, p-cpe:/a:debian:debian_linux:libreoffice-l10n-or, p-cpe:/a:debian:debian_linux:libreoffice-l10n-pa-in, p-cpe:/a:debian:debian_linux:libreoffice-l10n-pl, p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt, p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt-br, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ro, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ru, p-cpe:/a:debian:debian_linux:libreoffice-l10n-rw, p-cpe:/a:debian:debian_linux:libreoffice-l10n-si, p-cpe:/a:debian:debian_linux:libreoffice-l10n-sk, p-cpe:/a:debian:debian_linux:libreoffice-l10n-sl, p-cpe:/a:debian:debian_linux:libreoffice-l10n-sr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ss, p-cpe:/a:debian:debian_linux:libreoffice-l10n-st, p-cpe:/a:debian:debian_linux:libreoffice-l10n-sv, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ta, p-cpe:/a:debian:debian_linux:libreoffice-l10n-te, p-cpe:/a:debian:debian_linux:libreoffice-l10n-tg, p-cpe:/a:debian:debian_linux:libreoffice-l10n-th, p-cpe:/a:debian:debian_linux:libreoffice-l10n-tn, p-cpe:/a:debian:debian_linux:libreoffice-l10n-tr, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ts, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ug, p-cpe:/a:debian:debian_linux:libreoffice-l10n-uk, p-cpe:/a:debian:debian_linux:libreoffice-l10n-uz, p-cpe:/a:debian:debian_linux:libreoffice-l10n-ve, p-cpe:/a:debian:debian_linux:libreoffice-l10n-vi, p-cpe:/a:debian:debian_linux:libreoffice-l10n-xh, p-cpe:/a:debian:debian_linux:libreoffice-l10n-za, p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-cn, p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-tw, p-cpe:/a:debian:debian_linux:libreoffice-l10n-zu, p-cpe:/a:debian:debian_linux:libreoffice-librelogo, p-cpe:/a:debian:debian_linux:libreoffice-math, p-cpe:/a:debian:debian_linux:libreoffice-mysql-connector, p-cpe:/a:debian:debian_linux:libreoffice-officebean, p-cpe:/a:debian:debian_linux:libreoffice-ogltrans, p-cpe:/a:debian:debian_linux:libreoffice-pdfimport, p-cpe:/a:debian:debian_linux:libreoffice-presentation-minimizer, p-cpe:/a:debian:debian_linux:libreoffice-presenter-console, p-cpe:/a:debian:debian_linux:libreoffice-report-builder, p-cpe:/a:debian:debian_linux:libreoffice-report-builder-bin, p-cpe:/a:debian:debian_linux:libreoffice-script-provider-bsh, p-cpe:/a:debian:debian_linux:libreoffice-script-provider-js, p-cpe:/a:debian:debian_linux:libreoffice-script-provider-python, p-cpe:/a:debian:debian_linux:libreoffice-sdbc-firebird, p-cpe:/a:debian:debian_linux:libreoffice-sdbc-hsqldb, p-cpe:/a:debian:debian_linux:libreoffice-sdbc-postgresql, p-cpe:/a:debian:debian_linux:libreoffice-style-crystal, p-cpe:/a:debian:debian_linux:libreoffice-style-galaxy, p-cpe:/a:debian:debian_linux:libreoffice-style-hicontrast, p-cpe:/a:debian:debian_linux:libreoffice-style-oxygen, p-cpe:/a:debian:debian_linux:libreoffice-style-sifr, p-cpe:/a:debian:debian_linux:libreoffice-style-tango, p-cpe:/a:debian:debian_linux:libreoffice-subsequentcheckbase, p-cpe:/a:debian:debian_linux:libreoffice-wiki-publisher, p-cpe:/a:debian:debian_linux:libreoffice-writer, p-cpe:/a:debian:debian_linux:openoffice.org-dtd-officedocument1.0, p-cpe:/a:debian:debian_linux:python3-uno, p-cpe:/a:debian:debian_linux:python-uno
Exploited by Malware: True
Synopsis
The remote Debian host is missing a security update.
Description
Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document.
For Debian 8 'Jessie', this problem has been fixed in version 1:4.3.3-2+deb8u12.
We recommend that you upgrade your libreoffice packages.
NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Upgrade the affected packages.
Public Exploits
Target Network Port(s): N/A
Target Asset(s): N/A
Exploit Available: True (Metasploit Framework, Exploit-DB, GitHub)
Exploit Ease: Exploits are available
Here's the list of publicly known exploits and PoCs for verifying the Debian DLA-1669-1 : libreoffice security update vulnerability:
- Metasploit: exploit/multi/fileformat/libreoffice_macro_exec
[LibreOffice Macro Code Execution] - Metasploit: exploit/multi/fileformat/libreoffice_logo_exec
[LibreOffice Macro Python Code Execution] - Exploit-DB: exploits/multiple/local/46727.rb
[EDB-46727: LibreOffice < 6.0.7 / 6.1.3 - Macro Code Execution (Metasploit)] - Exploit-DB: exploits/multiple/remote/47298.rb
[EDB-47298: LibreOffice < 6.2.6 Macro - Python Code Execution (Metasploit)] - GitHub: https://github.com/4nimanegra/libreofficeExploit1
[CVE-2018-16858: CVE-2018-16858 exploit implementation] - GitHub: https://github.com/NextronSystems/valhallaAPI
[CVE-2018-16858] - GitHub: https://github.com/irsl/apache-openoffice-rce-via-uno-links
[CVE-2018-16858] - GitHub: https://github.com/litneet64/containerized-bomb-disposal
[CVE-2018-16858] - GitHub: https://github.com/phongld97/detect-cve-2018-16858
[CVE-2018-16858]
Before running any exploit against any system, make sure you are authorized by the owner of the target system(s) to perform such activity. In any other case, this would be considered as an illegal activity.
WARNING: Beware of using unverified exploits from sources such as GitHub or Exploit-DB. These exploits and PoCs could contain malware. For more information, see how to use exploits safely.
Risk Information
CVSS V2 Vector [?]: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C
CVSS Base Score: | 7.5 (High) |
Impact Subscore: | 6.4 |
Exploitability Subscore: | 10.0 |
CVSS Temporal Score: | 6.5 (Medium) |
CVSS Environmental Score: | NA (None) |
Modified Impact Subscore: | NA |
Overall CVSS Score: | 6.5 (Medium) |
CVSS Base Score: | 9.8 (Critical) |
Impact Subscore: | 5.9 |
Exploitability Subscore: | 3.9 |
CVSS Temporal Score: | 9.4 (Critical) |
CVSS Environmental Score: | NA (None) |
Modified Impact Subscore: | NA |
Overall CVSS Score: | 9.4 (Critical) |
Go back to menu.
Plugin Source
This is the debian_DLA-1669.nasl nessus plugin source code. This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory DLA-1669-1. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(122067);
script_version("1.7");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2018-16858");
script_name(english:"Debian DLA-1669-1 : libreoffice security update");
script_summary(english:"Checks dpkg output for the updated packages.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Debian host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Alex Infuehr discovered a directory traversal vulnerability which
could result in the execution of Python script code when opening a
malformed document.
For Debian 8 'Jessie', this problem has been fixed in version
1:4.3.3-2+deb8u12.
We recommend that you upgrade your libreoffice packages.
NOTE: Tenable Network Security has extracted the preceding description
block directly from the DLA security advisory. Tenable has attempted
to automatically clean and format it as much as possible without
introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://lists.debian.org/debian-lts-announce/2019/02/msg00014.html"
);
script_set_attribute(
attribute:"see_also",
value:"https://packages.debian.org/source/jessie/libreoffice"
);
script_set_attribute(attribute:"solution", value:"Upgrade the affected packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploited_by_malware", value:"true");
script_set_attribute(attribute:"metasploit_name", value:'LibreOffice Macro Code Execution');
script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:browser-plugin-libreoffice");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:fonts-opensymbol");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-gstreamer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-avmedia-backend-vlc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-base-drivers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-calc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dbg");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-dev-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-draw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-emailmerge");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-evolution");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gnome");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gtk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-gtk3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-cs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-da");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-de");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-dz");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-el");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-en-gb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-en-us");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-es");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-et");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-eu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-fi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-fr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-gl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-hi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-hu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-it");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ja");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-km");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ko");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-nl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-om");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-pt-br");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-ru");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-sv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-tr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-vi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-zh-cn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-help-zh-tw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-impress");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-java-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-kde");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-af");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ar");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-as");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ast");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-be");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bg");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-br");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-bs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-cs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-cy");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-da");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-de");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-dz");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-el");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-gb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-en-za");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-eo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-es");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-et");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-eu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fa");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-fr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ga");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gd");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-gu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-he");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-hu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-id");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-in");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-is");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-it");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ja");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ka");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-km");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-kmr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ko");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ku");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-lt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-lv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-mr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ne");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-nso");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-oc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-om");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-or");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pa-in");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-pt-br");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ro");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ru");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-rw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-si");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ss");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-st");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-sv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ta");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-te");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tg");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-th");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-tr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ts");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-uk");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-uz");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-ve");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-vi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-xh");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-za");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-cn");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zh-tw");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-l10n-zu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-librelogo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-math");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-mysql-connector");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-officebean");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-ogltrans");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-pdfimport");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-presentation-minimizer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-presenter-console");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-report-builder");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-report-builder-bin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-bsh");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-js");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-script-provider-python");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-firebird");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-hsqldb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-sdbc-postgresql");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-crystal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-galaxy");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-hicontrast");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-oxygen");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-sifr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-style-tango");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-subsequentcheckbase");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-wiki-publisher");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libreoffice-writer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:openoffice.org-dtd-officedocument1.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:python-uno");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:python3-uno");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0");
script_set_attribute(attribute:"vuln_publication_date", value:"2019/03/25");
script_set_attribute(attribute:"patch_publication_date", value:"2019/02/08");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/02/11");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Debian Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
exit(0);
}
include("audit.inc");
include("debian_package.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
flag = 0;
if (deb_check(release:"8.0", prefix:"browser-plugin-libreoffice", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"fonts-opensymbol", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-avmedia-backend-gstreamer", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-avmedia-backend-vlc", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-base", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-base-core", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-base-drivers", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-calc", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-common", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-core", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-dbg", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-dev", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-dev-doc", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-draw", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-emailmerge", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-evolution", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-gnome", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-gtk", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-gtk3", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-ca", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-cs", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-da", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-de", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-dz", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-el", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-en-gb", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-en-us", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-es", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-et", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-eu", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-fi", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-fr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-gl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-hi", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-hu", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-it", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-ja", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-km", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-ko", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-nl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-om", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-pl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-pt", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-pt-br", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-ru", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-sk", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-sl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-sv", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-tr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-vi", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-zh-cn", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-help-zh-tw", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-impress", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-java-common", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-kde", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-af", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ar", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-as", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ast", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-be", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-bg", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-bn", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-br", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-bs", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ca", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-cs", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-cy", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-da", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-de", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-dz", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-el", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-en-gb", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-en-za", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-eo", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-es", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-et", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-eu", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-fa", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-fi", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-fr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ga", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-gd", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-gl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-gu", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-he", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-hi", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-hr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-hu", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-id", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-in", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-is", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-it", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ja", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ka", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-kk", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-km", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-kmr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ko", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ku", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-lt", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-lv", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-mk", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ml", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-mn", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-mr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-nb", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ne", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-nl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-nn", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-nr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-nso", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-oc", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-om", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-or", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-pa-in", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-pl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-pt", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-pt-br", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ro", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ru", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-rw", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-si", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-sk", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-sl", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-sr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ss", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-st", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-sv", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ta", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-te", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-tg", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-th", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-tn", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-tr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ts", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ug", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-uk", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-uz", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-ve", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-vi", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-xh", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-za", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-zh-cn", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-zh-tw", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-l10n-zu", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-librelogo", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-math", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-mysql-connector", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-officebean", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-ogltrans", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-pdfimport", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-presentation-minimizer", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-presenter-console", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-report-builder", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-report-builder-bin", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-script-provider-bsh", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-script-provider-js", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-script-provider-python", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-sdbc-firebird", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-sdbc-hsqldb", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-sdbc-postgresql", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-style-crystal", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-style-galaxy", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-style-hicontrast", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-style-oxygen", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-style-sifr", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-style-tango", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-subsequentcheckbase", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-wiki-publisher", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"libreoffice-writer", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"openoffice.org-dtd-officedocument1.0", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"python-uno", reference:"1:4.3.3-2+deb8u12")) flag++;
if (deb_check(release:"8.0", prefix:"python3-uno", reference:"1:4.3.3-2+deb8u12")) flag++;
if (flag)
{
if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
else security_hole(0);
exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");
The latest version of this script can be found in these locations depending on your platform:
- Linux / Unix:
/opt/nessus/lib/nessus/plugins/debian_DLA-1669.nasl
- Windows:
C:\ProgramData\Tenable\Nessus\nessus\plugins\debian_DLA-1669.nasl
- Mac OS X:
/Library/Nessus/run/lib/nessus/plugins/debian_DLA-1669.nasl
Go back to menu.
How to Run
Here is how to run the Debian DLA-1669-1 : libreoffice security update as a standalone plugin via the Nessus web user interface (https://localhost:8834/):
- Click to start a New Scan.
- Select Advanced Scan.
- Navigate to the Plugins tab.
- On the top right corner click to Disable All plugins.
- On the left side table select Debian Local Security Checks plugin family.
- On the right side table select Debian DLA-1669-1 : libreoffice security update plugin ID 122067.
- Specify the target on the Settings tab and click to Save the scan.
- Run the scan.
Here are a few examples of how to run the plugin in the command line. Note that the examples below demonstrate the usage on the Linux / Unix platform.
Basic usage:
/opt/nessus/bin/nasl debian_DLA-1669.nasl -t <IP/HOST>
Run the plugin with audit trail message on the console:
/opt/nessus/bin/nasl -a debian_DLA-1669.nasl -t <IP/HOST>
Run the plugin with trace script execution written to the console (useful for debugging):
/opt/nessus/bin/nasl -T - debian_DLA-1669.nasl -t <IP/HOST>
Run the plugin with using a state file for the target and updating it (useful for running multiple plugins on the target):
/opt/nessus/bin/nasl -K /tmp/state debian_DLA-1669.nasl -t <IP/HOST>
Go back to menu.
References
See also:
- https://www.tenable.com/plugins/nessus/122067
- https://lists.debian.org/debian-lts-announce/2019/02/msg00014.html
- https://packages.debian.org/source/jessie/libreoffice
- https://vulners.com/nessus/DEBIAN_DLA-1669.NASL
- 128358 - CentOS 7 : libreoffice (CESA-2019:2130)
- 121559 - Debian DSA-4381-1 : libreoffice - security update
- 129133 - EulerOS 2.0 SP5 : libreoffice (EulerOS-SA-2019-1976)
- 129441 - EulerOS 2.0 SP8 : libreoffice (EulerOS-SA-2019-2082)
- 122041 - Fedora 28 : 1:libreoffice (2019-cf9ddf9fff)
- 121544 - LibreOffice 6.1.x < 6.1.3.2 Arbitrary Code Execution
- 121543 - LibreOffice 6.1.x < 6.1.3.2 Arbitrary Code Execution (macOS)
- 128014 - openSUSE Security Update : LibreOffice (openSUSE-2019-1929)
- 127678 - RHEL 7 : libreoffice (RHSA-2019:2130)
- 128233 - Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20190806)
- 125798 - SUSE SLED12 Security Update : LibreOffice (SUSE-SU-2019:1448-1)
- 126813 - SUSE SLED15 / SLES15 Security Update : LibreOffice (SUSE-SU-2019:1894-1)
- 127746 - SUSE SLED15 / SLES15 Security Update : libreoffice (SUSE-SU-2019:2003-1)
- 121640 - Ubuntu 14.04 LTS / 16.04 LTS : libreoffice vulnerabilities (USN-3883-1)
Version
This page has been produced using Nessus Professional 10.1.2 (#68) LINUX, Plugin set 202205072148.
Plugin file debian_DLA-1669.nasl version 1.7. For more plugins, visit the Nessus Plugin Library.
Go back to menu.