			-- /usr/bin/sldtoppm is executable

			(SELECT '/usr/bin/sldtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/sldtoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/spctoppm is executable
		(SELECT '/usr/bin/spctoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/spctoppm is executable

			(SELECT '/usr/bin/spctoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/spctoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/spctoppm is executable

			(SELECT '/usr/bin/spctoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/spctoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/spctoppm is executable

			(SELECT '/usr/bin/spctoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/spctoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/spottopgm is executable
		(SELECT '/usr/bin/spottopgm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/spottopgm is executable

			(SELECT '/usr/bin/spottopgm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/spottopgm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/spottopgm is executable

			(SELECT '/usr/bin/spottopgm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/spottopgm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/spottopgm is executable

			(SELECT '/usr/bin/spottopgm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/spottopgm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/sputoppm is executable
		(SELECT '/usr/bin/sputoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/sputoppm is executable

			(SELECT '/usr/bin/sputoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/sputoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/sputoppm is executable

			(SELECT '/usr/bin/sputoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/sputoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/sputoppm is executable

			(SELECT '/usr/bin/sputoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/sputoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tgatoppm is executable
		(SELECT '/usr/bin/tgatoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tgatoppm is executable

			(SELECT '/usr/bin/tgatoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tgatoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tgatoppm is executable

			(SELECT '/usr/bin/tgatoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tgatoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tgatoppm is executable

			(SELECT '/usr/bin/tgatoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tgatoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/thinkjettopbm is executable
		(SELECT '/usr/bin/thinkjettopbm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/thinkjettopbm is executable

			(SELECT '/usr/bin/thinkjettopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/thinkjettopbm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/thinkjettopbm is executable

			(SELECT '/usr/bin/thinkjettopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/thinkjettopbm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/thinkjettopbm is executable

			(SELECT '/usr/bin/thinkjettopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/thinkjettopbm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tifftopnm is executable
		(SELECT '/usr/bin/tifftopnm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tifftopnm is executable

			(SELECT '/usr/bin/tifftopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tifftopnm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tifftopnm is executable

			(SELECT '/usr/bin/tifftopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tifftopnm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tifftopnm is executable

			(SELECT '/usr/bin/tifftopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tifftopnm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/wbmptopbm is executable
		(SELECT '/usr/bin/wbmptopbm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/wbmptopbm is executable

			(SELECT '/usr/bin/wbmptopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/wbmptopbm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/wbmptopbm is executable

			(SELECT '/usr/bin/wbmptopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/wbmptopbm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/wbmptopbm is executable

			(SELECT '/usr/bin/wbmptopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/wbmptopbm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/winicontoppm is executable
		(SELECT '/usr/bin/winicontoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/winicontoppm is executable

			(SELECT '/usr/bin/winicontoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/winicontoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/winicontoppm is executable

			(SELECT '/usr/bin/winicontoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/winicontoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/winicontoppm is executable

			(SELECT '/usr/bin/winicontoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/winicontoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/xbmtopbm is executable
		(SELECT '/usr/bin/xbmtopbm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/xbmtopbm is executable

			(SELECT '/usr/bin/xbmtopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xbmtopbm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/xbmtopbm is executable

			(SELECT '/usr/bin/xbmtopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xbmtopbm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/xbmtopbm is executable

			(SELECT '/usr/bin/xbmtopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xbmtopbm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/ximtoppm is executable
		(SELECT '/usr/bin/ximtoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ximtoppm is executable

			(SELECT '/usr/bin/ximtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ximtoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ximtoppm is executable

			(SELECT '/usr/bin/ximtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ximtoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ximtoppm is executable

			(SELECT '/usr/bin/ximtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ximtoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/xpmtoppm is executable
		(SELECT '/usr/bin/xpmtoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/xpmtoppm is executable

			(SELECT '/usr/bin/xpmtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xpmtoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/xpmtoppm is executable

			(SELECT '/usr/bin/xpmtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xpmtoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/xpmtoppm is executable

			(SELECT '/usr/bin/xpmtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xpmtoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/xvminitoppm is executable
		(SELECT '/usr/bin/xvminitoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/xvminitoppm is executable

			(SELECT '/usr/bin/xvminitoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xvminitoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/xvminitoppm is executable

			(SELECT '/usr/bin/xvminitoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xvminitoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/xvminitoppm is executable

			(SELECT '/usr/bin/xvminitoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xvminitoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/xwdtopnm is executable
		(SELECT '/usr/bin/xwdtopnm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/xwdtopnm is executable

			(SELECT '/usr/bin/xwdtopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xwdtopnm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/xwdtopnm is executable

			(SELECT '/usr/bin/xwdtopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xwdtopnm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/xwdtopnm is executable

			(SELECT '/usr/bin/xwdtopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/xwdtopnm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/ybmtopbm is executable
		(SELECT '/usr/bin/ybmtopbm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ybmtopbm is executable

			(SELECT '/usr/bin/ybmtopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ybmtopbm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ybmtopbm is executable

			(SELECT '/usr/bin/ybmtopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ybmtopbm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ybmtopbm is executable

			(SELECT '/usr/bin/ybmtopbm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ybmtopbm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/yuvsplittoppm is executable
		(SELECT '/usr/bin/yuvsplittoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/yuvsplittoppm is executable

			(SELECT '/usr/bin/yuvsplittoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/yuvsplittoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/yuvsplittoppm is executable

			(SELECT '/usr/bin/yuvsplittoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/yuvsplittoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/yuvsplittoppm is executable

			(SELECT '/usr/bin/yuvsplittoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/yuvsplittoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/yuvtoppm is executable
		(SELECT '/usr/bin/yuvtoppm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/yuvtoppm is executable

			(SELECT '/usr/bin/yuvtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/yuvtoppm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/yuvtoppm is executable

			(SELECT '/usr/bin/yuvtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/yuvtoppm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/yuvtoppm is executable

			(SELECT '/usr/bin/yuvtoppm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/yuvtoppm' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/zeisstopnm is executable
		(SELECT '/usr/bin/zeisstopnm is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/zeisstopnm is executable

			(SELECT '/usr/bin/zeisstopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/zeisstopnm' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/zeisstopnm is executable

			(SELECT '/usr/bin/zeisstopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/zeisstopnm' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/zeisstopnm is executable

			(SELECT '/usr/bin/zeisstopnm is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/zeisstopnm' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL811
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0078' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mutt version is less than 1.4.1-3.3

	(SELECT 'mutt version is less than 1.4.1-3.3' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mutt' AND
		RPMTestedEpoch = '5' AND
		RPMTestedVersion = '1.4.1' AND
		RPMTestedRelease = '3.3' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/mutt is executable
	(SELECT '/usr/bin/mutt is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/mutt is executable

		(SELECT '/usr/bin/mutt is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mutt' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/mutt is executable

		(SELECT '/usr/bin/mutt is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mutt' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/mutt is executable

		(SELECT '/usr/bin/mutt is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mutt' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL813
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0965' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mailman version is less than 2.1.1-5

	(SELECT 'mailman version is less than 2.1.1-5' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mailman' AND
		RPMTestedEpoch = '3' AND
		RPMTestedVersion = '2.1.1' AND
		RPMTestedRelease = '5' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening on the network

	(SELECT 'httpd is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL815
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0992' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mailman version is less than 2.1.1-5

	(SELECT 'mailman version is less than 2.1.1-5' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mailman' AND
		RPMTestedEpoch = '3' AND
		RPMTestedVersion = '2.1.1' AND
		RPMTestedRelease = '5' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening on the network

	(SELECT 'httpd is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL818
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0006' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- gaim version is less than 0.75-0.9.0

	(SELECT 'gaim version is less than 0.75-0.9.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'gaim' AND
		RPMTestedEpoch = '1' AND
		RPMTestedVersion = '0.75' AND
		RPMTestedRelease = '0.9.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/gaim is executable
	(SELECT '/usr/bin/gaim is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL819
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0007' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- gaim version is less than 0.75-0.9.0

	(SELECT 'gaim version is less than 0.75-0.9.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'gaim' AND
		RPMTestedEpoch = '1' AND
		RPMTestedVersion = '0.75' AND
		RPMTestedRelease = '0.9.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/gaim is executable
	(SELECT '/usr/bin/gaim is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL820
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0008' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- gaim version is less than 0.75-0.9.0

	(SELECT 'gaim version is less than 0.75-0.9.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'gaim' AND
		RPMTestedEpoch = '1' AND
		RPMTestedVersion = '0.75' AND
		RPMTestedRelease = '0.9.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/gaim is executable
	(SELECT '/usr/bin/gaim is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/gaim is executable

		(SELECT '/usr/bin/gaim is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/gaim' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL821
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0848' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- slocate version is less than 2.7-2

	(SELECT 'slocate version is less than 2.7-2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'slocate' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.7' AND
		RPMTestedRelease = '2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/slocate is setgid
	(SELECT '/usr/bin/slocate is setgid' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/slocate is setgid

		(SELECT '/usr/bin/slocate is setgid' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/slocate' AND
			SGID = '1')

	AND EXISTS
		-- /usr/bin/slocate is setgid

		(SELECT '/usr/bin/slocate is setgid' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/slocate' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL822
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-1023' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mc version is less than 4.6.0-7.9

	(SELECT 'mc version is less than 4.6.0-7.9' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mc' AND
		RPMTestedEpoch = '1' AND
		RPMTestedVersion = '4.6.0' AND
		RPMTestedRelease = '7.9' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/mc is executable
	(SELECT '/usr/bin/mc is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/mc is executable

		(SELECT '/usr/bin/mc is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mc' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/mc is executable

		(SELECT '/usr/bin/mc is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mc' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/mc is executable

		(SELECT '/usr/bin/mc is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mc' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL823
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0592' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kdelibs version is less than 3.1-13

	(SELECT 'kdelibs version is less than 3.1-13' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kdelibs' AND
		RPMTestedEpoch = '6' AND
		RPMTestedVersion = '3.1' AND
		RPMTestedRelease = '13' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/konqueror is executable
	(SELECT '/usr/bin/konqueror is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/konqueror is executable

		(SELECT '/usr/bin/konqueror is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/konqueror' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/konqueror is executable

		(SELECT '/usr/bin/konqueror is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/konqueror' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/konqueror is executable

		(SELECT '/usr/bin/konqueror is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/konqueror' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL825
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0077' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.21-9.0.1.EL

		(SELECT 'kernel version is less than 2.4.21-9.0.1.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.1.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.21-9.0.1.EL

		(SELECT 'kernel-smp version is less than 2.4.21-9.0.1.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.1.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-hugemem version is less than 2.4.21-9.0.1.EL

		(SELECT 'kernel-hugemem version is less than 2.4.21-9.0.1.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-hugemem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.1.EL' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL826
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0097' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- pwlib version is less than 1.4.7-7.EL

	(SELECT 'pwlib version is less than 1.4.7-7.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'pwlib' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.4.7' AND
		RPMTestedRelease = '7.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- a program is listening on TCP or UDP port 1720

	(SELECT 'a program is listening on TCP or UDP port 1720' FROM RedHat_InetListeningServers WHERE
		LocalPort = '1720' AND
		ProgramName LIKE '%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL827
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0082' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- samba version is less than 3.0.2-6.3E

	(SELECT 'samba version is less than 3.0.2-6.3E' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'samba' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '3.0.2' AND
		RPMTestedRelease = '6.3E' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- smbd is listening on the network

	(SELECT 'smbd is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%smbd%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL828
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0973' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mod_python version is less than 3.0.1-4

	(SELECT 'mod_python version is less than 3.0.1-4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mod_python' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '3.0.1' AND
		RPMTestedRelease = '4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening to the network

	(SELECT 'httpd is listening to the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL830
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0083' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- XFree86 version is less than 4.3.0-55.EL

	(SELECT 'XFree86 version is less than 4.3.0-55.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'XFree86' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '4.3.0' AND
		RPMTestedRelease = '55.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/X11R6/bin/XFree86 is SUID and executable
	(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/X11R6/bin/XFree86 is SUID and executable

		(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/X11R6/bin/XFree86' AND
			SUID = '1')

	AND EXISTS
		-- /usr/X11R6/bin/XFree86 is SUID and executable
		(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/X11R6/bin/XFree86 is SUID and executable

			(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/X11R6/bin/XFree86' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/X11R6/bin/XFree86 is SUID and executable

			(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/X11R6/bin/XFree86' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL831
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0084' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- XFree86 version is less than 4.3.0-55.EL

	(SELECT 'XFree86 version is less than 4.3.0-55.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'XFree86' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '4.3.0' AND
		RPMTestedRelease = '55.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/X11R6/bin/XFree86 is SUID and executable
	(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/X11R6/bin/XFree86 is SUID and executable

		(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/X11R6/bin/XFree86' AND
			SUID = '1')

	AND EXISTS
		-- /usr/X11R6/bin/XFree86 is SUID and executable
		(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/X11R6/bin/XFree86 is SUID and executable

			(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/X11R6/bin/XFree86' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/X11R6/bin/XFree86 is SUID and executable

			(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/X11R6/bin/XFree86' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL832
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0106' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- XFree86 version is less than 4.3.0-55.EL

	(SELECT 'XFree86 version is less than 4.3.0-55.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'XFree86' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '4.3.0' AND
		RPMTestedRelease = '55.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/X11R6/bin/XFree86 is SUID and executable
	(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/X11R6/bin/XFree86 is SUID and executable

		(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/X11R6/bin/XFree86' AND
			SUID = '1')

	AND EXISTS
		-- /usr/X11R6/bin/XFree86 is SUID and executable
		(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/X11R6/bin/XFree86 is SUID and executable

			(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/X11R6/bin/XFree86' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/X11R6/bin/XFree86 is SUID and executable

			(SELECT '/usr/X11R6/bin/XFree86 is SUID and executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/X11R6/bin/XFree86' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL833
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0110' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- libxml2 version is less than 2.5.10-6

		(SELECT 'libxml2 version is less than 2.5.10-6' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libxml2' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.5.10' AND
			RPMTestedRelease = '6' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libxml2-devel version is less than 2.5.10-6

		(SELECT 'libxml2-devel version is less than 2.5.10-6' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libxml2-devel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.5.10' AND
			RPMTestedRelease = '6' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libxml2-python version is less than 2.5.10-6

		(SELECT 'libxml2-python version is less than 2.5.10-6' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libxml2-python' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.5.10' AND
			RPMTestedRelease = '6' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL834
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0003' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.20-30.9

		(SELECT 'kernel version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.20-30.9

		(SELECT 'kernel-smp version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.20-30.9

		(SELECT 'kernel-bigmem version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL835
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0010' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.20-30.9

		(SELECT 'kernel version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.20-30.9

		(SELECT 'kernel-smp version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.20-30.9

		(SELECT 'kernel-bigmem version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL836
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0075' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.20-30.9

		(SELECT 'kernel version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.20-30.9

		(SELECT 'kernel-smp version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.20-30.9

		(SELECT 'kernel-bigmem version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL837
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0077' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.20-30.9

		(SELECT 'kernel version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.20-30.9

		(SELECT 'kernel-smp version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.20-30.9

		(SELECT 'kernel-bigmem version is less than 2.4.20-30.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '30.9' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL838
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0078' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mutt version is less than 1.4.1-3.4

	(SELECT 'mutt version is less than 1.4.1-3.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mutt' AND
		RPMTestedEpoch = '5' AND
		RPMTestedVersion = '1.4.1' AND
		RPMTestedRelease = '3.4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/mutt is executable
	(SELECT '/usr/bin/mutt is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/mutt is executable

		(SELECT '/usr/bin/mutt is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mutt' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/mutt is executable

		(SELECT '/usr/bin/mutt is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mutt' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/mutt is executable

		(SELECT '/usr/bin/mutt is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mutt' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL839
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0973' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mod_python version is less than 3.0.1-4

	(SELECT 'mod_python version is less than 3.0.1-4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mod_python' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '3.0.1' AND
		RPMTestedRelease = '4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening to the network

	(SELECT 'httpd is listening to the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL845
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0111' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable configuration
	(SELECT 'Vulnerable configuration' FROM Placeholder WHERE

	EXISTS
		-- gdk-pixbuf version is less than 0.22.0-6.0.3

		(SELECT 'gdk-pixbuf version is less than 0.22.0-6.0.3' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'gdk-pixbuf' AND
			RPMTestedEpoch = '1' AND
			RPMTestedVersion = '0.22.0' AND
			RPMTestedRelease = '6.0.3' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- gdk-pixbuf-devel version is less than 0.22.0-6.0.3

		(SELECT 'gdk-pixbuf-devel version is less than 0.22.0-6.0.3' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'gdk-pixbuf-devel' AND
			RPMTestedEpoch = '1' AND
			RPMTestedVersion = '0.22.0' AND
			RPMTestedRelease = '6.0.3' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- gdk-pixbuf-gnome version is less than 0.22.0-6.0.3

		(SELECT 'gdk-pixbuf-gnome version is less than 0.22.0-6.0.3' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'gdk-pixbuf-gnome' AND
			RPMTestedEpoch = '1' AND
			RPMTestedVersion = '0.22.0' AND
			RPMTestedRelease = '6.0.3' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL846
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0111' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable configuration
	(SELECT 'Vulnerable configuration' FROM Placeholder WHERE

	EXISTS
		-- gdk-pixbuf version is less than 0.22.0-6.1.0

		(SELECT 'gdk-pixbuf version is less than 0.22.0-6.1.0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'gdk-pixbuf' AND
			RPMTestedEpoch = '1' AND
			RPMTestedVersion = '0.22.0' AND
			RPMTestedRelease = '6.1.0' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- gdk-pixbuf-devel version is less than 0.22.0-6.1.0

		(SELECT 'gdk-pixbuf-devel version is less than 0.22.0-6.1.0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'gdk-pixbuf-devel' AND
			RPMTestedEpoch = '1' AND
			RPMTestedVersion = '0.22.0' AND
			RPMTestedRelease = '6.1.0' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- gdk-pixbuf-gnome version is less than 0.22.0-6.1.0

		(SELECT 'gdk-pixbuf-gnome version is less than 0.22.0-6.1.0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'gdk-pixbuf-gnome' AND
			RPMTestedEpoch = '1' AND
			RPMTestedVersion = '0.22.0' AND
			RPMTestedRelease = '6.1.0' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL847
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0989' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.9.1

	(SELECT 'tcpdump version is less than 3.7.2-7.9.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.9.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL849
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0107' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- sysstat version is less than 4.0.7-4.rhl9.1

	(SELECT 'sysstat version is less than 4.0.7-4.rhl9.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'sysstat' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '4.0.7' AND
		RPMTestedRelease = '4.rhl9.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL850
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0055' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.9.1

	(SELECT 'tcpdump version is less than 3.7.2-7.9.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.9.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL851
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0057' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.9.1

	(SELECT 'tcpdump version is less than 3.7.2-7.9.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.9.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL852
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0989' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.E3.1

	(SELECT 'tcpdump version is less than 3.7.2-7.E3.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.E3.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL853
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0055' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.E3.1

	(SELECT 'tcpdump version is less than 3.7.2-7.E3.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.E3.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL854
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0057' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.E3.1

	(SELECT 'tcpdump version is less than 3.7.2-7.E3.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.E3.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL855
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0977' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- cvs version is less than 1.11.2-13

	(SELECT 'cvs version is less than 1.11.2-13' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '13' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- / is world-writable

	(SELECT '/ is world-writable' FROM RedHat_FileAttributes WHERE
		FilePath = '/' AND
		OWRITE = '1')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL856
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-1012' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.0a-0.90.1

		(SELECT 'ethereal version is less than 0.10.0a-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.0a' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.0a-0.90.1

		(SELECT 'ethereal-gnome version is less than 0.10.0a-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal=gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.0a' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/tethereal is executable
		(SELECT '/usr/sbin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/tethereal is executable

			(SELECT '/usr/sbin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/tethereal is executable

			(SELECT '/usr/sbin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/tethereal is executable

			(SELECT '/usr/sbin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL857
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-1013' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.0a-0.90.1

		(SELECT 'ethereal version is less than 0.10.0a-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.0a' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.0a-0.90.1

		(SELECT 'ethereal-gnome version is less than 0.10.0a-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal=gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.0a' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/tethereal is executable
		(SELECT '/usr/sbin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/tethereal is executable

			(SELECT '/usr/sbin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/tethereal is executable

			(SELECT '/usr/sbin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/tethereal is executable

			(SELECT '/usr/sbin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL858
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2003-0988' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kdepim version is less than 3.1-6

	(SELECT 'kdepim version is less than 3.1-6' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kdepim' AND
		RPMTestedEpoch = '6' AND
		RPMTestedVersion = '3.1' AND
		RPMTestedRelease = '6' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/share/services/kfile_vcf.desktop is readable
	(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM Placeholder WHERE

	EXISTS
		-- /usr/share/services/kfile_vcf.desktop is readable

		(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/share/services/kfile_vcf.desktop' AND
			UREAD = '1')

	OR EXISTS
		-- /usr/share/services/kfile_vcf.desktop is readable

		(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/share/services/kfile_vcf.desktop' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/share/services/kfile_vcf.desktop is readable

		(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/share/services/kfile_vcf.desktop' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL859
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0984' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.20-28.9

		(SELECT 'kernel version is less than 2.4.20-28.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '28.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.20-28.9

		(SELECT 'kernel-smp version is less than 2.4.20-28.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '28.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.20-28.9

		(SELECT 'kernel-bigmem version is less than 2.4.20-28.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '28.9' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL860
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2003-0985' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.20-28.9

		(SELECT 'kernel version is less than 2.4.20-28.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '28.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.20-28.9

		(SELECT 'kernel-smp version is less than 2.4.20-28.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '28.9' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.20-28.9

		(SELECT 'kernel-bigmem version is less than 2.4.20-28.9' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.20' AND
			RPMTestedRelease = '28.9' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL861
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0154' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- nfs-utils version is less than 1.0.6-7.EL

	(SELECT 'nfs-utils version is less than 1.0.6-7.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'nfs-utils' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.0.6' AND
		RPMTestedRelease = '7.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- rpc.mountd is listening to the network

	(SELECT 'rpc.mountd is listening to the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%rpc.mountd%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL862
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0107' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- sysstat version is less than 4.0.7-4.EL3.2

	(SELECT 'sysstat version is less than 4.0.7-4.EL3.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'sysstat' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '4.0.7' AND
		RPMTestedRelease = '4.EL3.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL863
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0542' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- httpd version is less than 2.0.40-21.9

	(SELECT 'httpd version is less than 2.0.40-21.9' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'httpd' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.0.40' AND
		RPMTestedRelease = '21.9' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd.worker is listening on the network

	(SELECT 'httpd.worker is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd.worker%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL864
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0542' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- httpd version is less than 2.0.46-26.ent

	(SELECT 'httpd version is less than 2.0.46-26.ent' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'httpd' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.0.46' AND
		RPMTestedRelease = '26.ent' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd.worker is listening on the network

	(SELECT 'httpd.worker is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd.worker%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL865
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2003-0988' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kdepim version is less than 3.1.3-3.3

	(SELECT 'kdepim version is less than 3.1.3-3.3' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kdepim' AND
		RPMTestedEpoch = '6' AND
		RPMTestedVersion = '3.1.3' AND
		RPMTestedRelease = '3.3' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/share/services/kfile_vcf.desktop is readable
	(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM Placeholder WHERE

	EXISTS
		-- /usr/share/services/kfile_vcf.desktop is readable

		(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/share/services/kfile_vcf.desktop' AND
			UREAD = '1')

	OR EXISTS
		-- /usr/share/services/kfile_vcf.desktop is readable

		(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/share/services/kfile_vcf.desktop' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/share/services/kfile_vcf.desktop is readable

		(SELECT '/usr/share/services/kfile_vcf.desktop is readable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/share/services/kfile_vcf.desktop' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL866
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0977' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- cvs version is less than 1.11.2-14

	(SELECT 'cvs version is less than 1.11.2-14' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '14' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- / is world-writable

	(SELECT '/ is world-writable' FROM RedHat_FileAttributes WHERE
		FilePath = '/' AND
		OWRITE = '1')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL867
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2003-0985' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Configuration
	(SELECT 'Vulnerable Configuration' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.21-4.0.2.EL

		(SELECT 'kernel version is less than 2.4.21-4.0.2.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '4.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.21-4.0.2.EL

		(SELECT 'kernel-smp version is less than 2.4.21-4.0.2.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '4.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-bigmem version is less than 2.4.21-4.0.2.EL

		(SELECT 'kernel-bigmem version is less than 2.4.21-4.0.2.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-bigmem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '4.0.2.EL' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL868
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0001' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass = 'x86_64')

AND EXISTS

	-- kernel version is less than 2.4.21-9.EL

	(SELECT 'kernel version is less than 2.4.21-9.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kernel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.4.21' AND
		RPMTestedRelease = '9.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL869
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0935' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- net-snmp version is less than 5.0.9-2.30E.1

	(SELECT 'net-snmp version is less than 5.0.9-2.30E.1' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'net-snmp' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '5.0.9' AND
		RPMTestedRelease = '2.30E.1' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- snmpd is listening to the network

	(SELECT 'snmpd is listening to the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%snmpd%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL870
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0079' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openssl version is less than 0.9.7a-33.4

	(SELECT 'openssl version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-devel version is less than 0.9.7a-33.4

	(SELECT 'openssl-devel version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-devel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-perl version is less than 0.9.7a-33.4

	(SELECT 'openssl-perl version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-perl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096b version is less than 0.9.6b-16

	(SELECT 'openssl096b version is less than 0.9.6b-16' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096b' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6b' AND
		RPMTestedRelease = '16' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL871
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0081' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openssl version is less than 0.9.7a-33.4

	(SELECT 'openssl version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-devel version is less than 0.9.7a-33.4

	(SELECT 'openssl-devel version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-devel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-perl version is less than 0.9.7a-33.4

	(SELECT 'openssl-perl version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-perl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096b version is less than 0.9.6b-16

	(SELECT 'openssl096b version is less than 0.9.6b-16' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096b' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6b' AND
		RPMTestedRelease = '16' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL872
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0564' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mozilla-nss version is less than 1.4.2-0.9.0

	(SELECT 'mozilla-nss version is less than 1.4.2-0.9.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mozilla-nss' AND
		RPMTestedEpoch = '37' AND
		RPMTestedVersion = '1.4.2' AND
		RPMTestedRelease = '0.9.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL873
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0594' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mozilla version is less than 1.4.2-0.9.0

	(SELECT 'mozilla version is less than 1.4.2-0.9.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mozilla' AND
		RPMTestedEpoch = '37' AND
		RPMTestedVersion = '1.4.2' AND
		RPMTestedRelease = '0.9.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/mozilla is executable
	(SELECT '/usr/bin/mozilla is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/mozilla is executable

		(SELECT '/usr/bin/mozilla is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mozilla' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/mozilla is executable

		(SELECT '/usr/bin/mozilla is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mozilla' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/mozilla is executable

		(SELECT '/usr/bin/mozilla is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mozilla' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL874
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0191' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mozilla version is less than 1.4.2-0.9.0

	(SELECT 'mozilla version is less than 1.4.2-0.9.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mozilla' AND
		RPMTestedEpoch = '37' AND
		RPMTestedVersion = '1.4.2' AND
		RPMTestedRelease = '0.9.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/mozilla is executable
	(SELECT '/usr/bin/mozilla is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/mozilla is executable

		(SELECT '/usr/bin/mozilla is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mozilla' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/mozilla is executable

		(SELECT '/usr/bin/mozilla is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mozilla' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/mozilla is executable

		(SELECT '/usr/bin/mozilla is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/mozilla' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL875
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0110' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- libxml2 version is less than 2.5.10-6

		(SELECT 'libxml2 version is less than 2.5.10-6' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libxml2' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.5.10' AND
			RPMTestedRelease = '6' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libxml2-devel version is less than 2.5.10-6

		(SELECT 'libxml2-devel version is less than 2.5.10-6' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libxml2-devel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.5.10' AND
			RPMTestedRelease = '6' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libxml2-python version is less than 2.5.10-6

		(SELECT 'libxml2-python version is less than 2.5.10-6' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libxml2-python' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.5.10' AND
			RPMTestedRelease = '6' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL876
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0113' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mod_ssl version is less than 2.0.46-32.ent

	(SELECT 'mod_ssl version is less than 2.0.46-32.ent' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mod_ssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.0.46' AND
		RPMTestedRelease = '32.ent' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening to the network

	(SELECT 'httpd is listening to the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL877
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0189' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- squid version is less than 2.5STABLE1-3.9

	(SELECT 'squid version is less than 2.5STABLE1-3.9' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'squid' AND
		RPMTestedEpoch = '7' AND
		RPMTestedVersion = '2.5STABLE1' AND
		RPMTestedRelease = '3.9' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- squid is listening on the network

	(SELECT 'squid is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%squid%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL878
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0176' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.90.1

		(SELECT 'ethereal version is less than 0.10.3-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.90.1

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL879
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0365' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.90.1

		(SELECT 'ethereal version is less than 0.10.3-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.90.1

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL880
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0367' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.90.1

		(SELECT 'ethereal version is less than 0.10.3-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.90.1

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.90.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.90.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL887
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0176' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.1

		(SELECT 'ethereal version is less than 0.10.3-0.30E.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.1

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL891
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0365' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.1

		(SELECT 'ethereal version is less than 0.10.3-0.30E.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.1

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL902
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0081' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openssl version is less than 0.9.7a-20

	(SELECT 'openssl version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-devel version is less than 0.9.7a-20

	(SELECT 'openssl-devel version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-devel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-perl version is less than 0.9.7a-20

	(SELECT 'openssl-perl version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-perl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096 version is less than 0.9.6-25.9

	(SELECT 'openssl096 version is less than 0.9.6-25.9' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6' AND
		RPMTestedRelease = '25.9' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096b version is less than 0.9.6b-15

	(SELECT 'openssl096b version is less than 0.9.6b-15' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096b' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6b' AND
		RPMTestedRelease = '15' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL905
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0367' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.1

		(SELECT 'ethereal version is less than 0.10.3-0.30E.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.1' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.1

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.1' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.1' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL914
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0564' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mozilla-nss version is less than 1.4.2-3.0.2

	(SELECT 'mozilla-nss version is less than 1.4.2-3.0.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mozilla-nss' AND
		RPMTestedEpoch = '37' AND
		RPMTestedVersion = '1.4.2' AND
		RPMTestedRelease = '3.0.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL917
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0594' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mozilla-nss version is less than 1.4.2-3.0.2

	(SELECT 'mozilla-nss version is less than 1.4.2-3.0.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mozilla-nss' AND
		RPMTestedEpoch = '37' AND
		RPMTestedVersion = '1.4.2' AND
		RPMTestedRelease = '3.0.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL928
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0112' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openssl version is less than 0.9.7a-33.4

	(SELECT 'openssl version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-devel version is less than 0.9.7a-33.4

	(SELECT 'openssl-devel version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-devel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-perl version is less than 0.9.7a-33.4

	(SELECT 'openssl-perl version is less than 0.9.7a-33.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-perl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '33.4' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096b version is less than 0.9.6b-16

	(SELECT 'openssl096b version is less than 0.9.6b-16' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096b' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6b' AND
		RPMTestedRelease = '16' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL937
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0191' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- mozilla-nss version is less than 1.4.2-3.0.2

	(SELECT 'mozilla-nss version is less than 1.4.2-3.0.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'mozilla-nss' AND
		RPMTestedEpoch = '37' AND
		RPMTestedVersion = '1.4.2' AND
		RPMTestedRelease = '3.0.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL939
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0424' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kernel versions
	(SELECT 'kernel versions' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.21-9.0.3.EL

		(SELECT 'kernel version is less than 2.4.21-9.0.3.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.3.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.21-9.0.3.EL

		(SELECT 'kernel-smp version is less than 2.4.21-9.0.3.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.3.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-hugemem version is less than 2.4.21-9.0.3.EL

		(SELECT 'kernel-hugemem version is less than 2.4.21-9.0.3.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-hugemem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.3.EL' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL940
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0109' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kernel versions
	(SELECT 'kernel versions' FROM Placeholder WHERE

	EXISTS
		-- kernel version is less than 2.4.21-9.0.3.EL

		(SELECT 'kernel version is less than 2.4.21-9.0.3.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.3.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp version is less than 2.4.21-9.0.3.EL

		(SELECT 'kernel-smp version is less than 2.4.21-9.0.3.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.3.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-hugemem version is less than 2.4.21-9.0.3.EL

		(SELECT 'kernel-hugemem version is less than 2.4.21-9.0.3.EL' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-hugemem' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '9.0.3.EL' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /bin/mount is world-executable AND Set-UID
	(SELECT '/bin/mount is world-executable AND Set-UID' FROM Placeholder WHERE

	EXISTS
		-- /bin/mount is world-executable AND Set-UID

		(SELECT '/bin/mount is world-executable AND Set-UID' FROM RedHat_FileAttributes WHERE
			FilePath = '/bin/mount' AND
			OEXEC = '1')

	AND EXISTS
		-- /bin/mount is world-executable AND Set-UID

		(SELECT '/bin/mount is world-executable AND Set-UID' FROM RedHat_FileAttributes WHERE
			FilePath = '/bin/mount' AND
			SUID = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL941
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2004-0189' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- squid version is less than 2.5.STABLE3-5.3E

	(SELECT 'squid version is less than 2.5.STABLE3-5.3E' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'squid' AND
		RPMTestedEpoch = '7' AND
		RPMTestedVersion = '2.5.STABLE3' AND
		RPMTestedRelease = '5.3E' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- squid is listening on the network

	(SELECT 'squid is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%squid%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL945
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0155' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- ipsec-tools version is less than 0.2.5-0.4

	(SELECT 'ipsec-tools version is less than 0.2.5-0.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'ipsec-tools' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.2.5' AND
		RPMTestedRelease = '0.4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- racoon is listening on the network

	(SELECT 'racoon is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%racoon%' AND
		Protocol = 'UDP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL947
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0164' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- ipsec-tools version is less than 0.2.5-0.4

	(SELECT 'ipsec-tools version is less than 0.2.5-0.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'ipsec-tools' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.2.5' AND
		RPMTestedRelease = '0.4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- racoon is listening on the network

	(SELECT 'racoon is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%racoon%' AND
		Protocol = 'UDP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL954
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0411' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kdelibs version is less than 3.1.3-6.4

	(SELECT 'kdelibs version is less than 3.1.3-6.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kdelibs' AND
		RPMTestedEpoch = '6' AND
		RPMTestedVersion = '3.1.3' AND
		RPMTestedRelease = '6.4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- telnet, rlogin, ssh or kmail is executable
	(SELECT 'telnet, rlogin, ssh or kmail is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/telnet is executable
		(SELECT '/usr/bin/telnet is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/telnet is executable

			(SELECT '/usr/bin/telnet is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/telnet' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/telnet is executable

			(SELECT '/usr/bin/telnet is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/telnet' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/telnet is executable

			(SELECT '/usr/bin/telnet is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/telnet' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/kerberos/bin/telnet is executable
		(SELECT '/usr/kerberos/bin/telnet is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/kerberos/bin/telnet is executable

			(SELECT '/usr/kerberos/bin/telnet is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/kerberos/bin/telnet' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/kerberos/bin/telnet is executable

			(SELECT '/usr/kerberos/bin/telnet is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/kerberos/bin/telnet' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/kerberos/bin/telnet is executable

			(SELECT '/usr/kerberos/bin/telnet is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/kerberos/bin/telnet' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/rlogin is executable
		(SELECT '/usr/bin/rlogin is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/rlogin is executable

			(SELECT '/usr/bin/rlogin is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/rlogin' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/rlogin is executable

			(SELECT '/usr/bin/rlogin is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/rlogin' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/rlogin is executable

			(SELECT '/usr/bin/rlogin is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/rlogin' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/kerberos/bin/rlogin is executable
		(SELECT '/usr/kerberos/bin/rlogin is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/kerberos/bin/rlogin is executable

			(SELECT '/usr/kerberos/bin/rlogin is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/kerberos/bin/rlogin' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/kerberos/bin/rlogin is executable

			(SELECT '/usr/kerberos/bin/rlogin is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/kerberos/bin/rlogin' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/kerberos/bin/rlogin is executable

			(SELECT '/usr/kerberos/bin/rlogin is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/kerberos/bin/rlogin' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/ssh is executable
		(SELECT '/usr/bin/ssh is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ssh is executable

			(SELECT '/usr/bin/ssh is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ssh' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ssh is executable

			(SELECT '/usr/bin/ssh is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ssh' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ssh is executable

			(SELECT '/usr/bin/ssh is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ssh' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/kmail is executable
		(SELECT '/usr/bin/kmail is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/kmail is executable

			(SELECT '/usr/bin/kmail is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/kmail' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/kmail is executable

			(SELECT '/usr/bin/kmail is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/kmail' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/kmail is executable

			(SELECT '/usr/bin/kmail is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/kmail' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL967
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0426' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- rsync version is less than 2.5.7-4.3E

	(SELECT 'rsync version is less than 2.5.7-4.3E' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'rsync' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.5.7' AND
		RPMTestedRelease = '4.3E' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL970
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0396' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- cvs version is less than 1.11.2-22

	(SELECT 'cvs version is less than 1.11.2-22' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '22' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL971
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0421' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- libpng/libpng-devel is less than 1.2.2-21 or libpng10/libpng-devel less than 1.0.13 is installed
	(SELECT 'libpng/libpng-devel is less than 1.2.2-21 or libpng10/libpng-devel less than 1.0.13 is installed' FROM Placeholder WHERE

	EXISTS
		-- libpng version is less than 1.2.2-21

		(SELECT 'libpng version is less than 1.2.2-21' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng' AND
			RPMTestedEpoch = '2' AND
			RPMTestedVersion = '1.2.2' AND
			RPMTestedRelease = '21' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libpng-devel version is less than 1.2.2-21

		(SELECT 'libpng-devel version is less than 1.2.2-21' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng-devel' AND
			RPMTestedEpoch = '2' AND
			RPMTestedVersion = '1.2.2' AND
			RPMTestedRelease = '21' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libpng10 version is less than 1.0.13-12

		(SELECT 'libpng10 version is less than 1.0.13-12' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '1.0.13' AND
			RPMTestedRelease = '12' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libpng10-devel version is less than 1.0.13-12

		(SELECT 'libpng10-devel version is less than 1.0.13-12' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng-devel' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '1.0.13' AND
			RPMTestedRelease = '12' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL972
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0183' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '%3_S%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.E3.2

	(SELECT 'tcpdump version is less than 3.7.2-7.E3.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.E3.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL975
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0079' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openssl version is less than 0.9.7a-20

	(SELECT 'openssl version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-devel version is less than 0.9.7a-20

	(SELECT 'openssl-devel version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-devel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-perl version is less than 0.9.7a-20

	(SELECT 'openssl-perl version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-perl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096 version is less than 0.9.6-25.9

	(SELECT 'openssl096 version is less than 0.9.6-25.9' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6' AND
		RPMTestedRelease = '25.9' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096b version is less than 0.9.6b-15

	(SELECT 'openssl096b version is less than 0.9.6b-15' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096b' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6b' AND
		RPMTestedRelease = '15' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL976
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0184' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '%3_S%')

AND EXISTS

	-- tcpdump version is less than 3.7.2-7.E3.2

	(SELECT 'tcpdump version is less than 3.7.2-7.E3.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'tcpdump' AND
		RPMTestedEpoch = '14' AND
		RPMTestedVersion = '3.7.2' AND
		RPMTestedRelease = '7.E3.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/tcpdump is executable
	(SELECT '/usr/sbin/tcpdump is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/sbin/tcpdump is executable

		(SELECT '/usr/sbin/tcpdump is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/tcpdump' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL977
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0234' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- lha version is less than 1.14i-10.2

	(SELECT 'lha version is less than 1.14i-10.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'lha' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.14i' AND
		RPMTestedRelease = '10.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/lha is executable
	(SELECT '/usr/bin/lha is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/lha is executable

		(SELECT '/usr/bin/lha is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/lha' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/lha is executable

		(SELECT '/usr/bin/lha is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/lha' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/lha is executable

		(SELECT '/usr/bin/lha is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/lha' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL978
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0235' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- lha version is less than 1.14i-10.2

	(SELECT 'lha version is less than 1.14i-10.2' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'lha' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.14i' AND
		RPMTestedRelease = '10.2' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/lha is executable
	(SELECT '/usr/bin/lha is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/lha is executable

		(SELECT '/usr/bin/lha is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/lha' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/lha is executable

		(SELECT '/usr/bin/lha is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/lha' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/lha is executable

		(SELECT '/usr/bin/lha is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/lha' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL979
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0233' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- utempter version is less than 0.5.5-1.3EL.0

	(SELECT 'utempter version is less than 0.5.5-1.3EL.0' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'utempter' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.5.5' AND
		RPMTestedRelease = '1.3EL.0' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/sbin/utempter is executable
	(SELECT '/usr/sbin/utempter is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/sbin/utempter is executable

		(SELECT '/usr/sbin/utempter is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/sbin/utempter' AND
			SGID = '1')

	AND EXISTS
		-- /usr/sbin/utempter is executable
		(SELECT '/usr/sbin/utempter is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/utempter is executable

			(SELECT '/usr/sbin/utempter is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/utempter' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/utempter is executable

			(SELECT '/usr/sbin/utempter is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/utempter' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/utempter is executable

			(SELECT '/usr/sbin/utempter is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/utempter' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL980
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0541' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- squid version is less than 2.5.STABLE3-6.3E

	(SELECT 'squid version is less than 2.5.STABLE3-6.3E' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'squid' AND
		RPMTestedEpoch = '7' AND
		RPMTestedVersion = '2.5.STABLE3' AND
		RPMTestedRelease = '6.3E' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- squid is listening on the network

	(SELECT 'squid is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%squid%')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL982
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0504' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL984
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0403' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- ipsec-tools version is less than 0.2.5-0.4

	(SELECT 'ipsec-tools version is less than 0.2.5-0.4' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'ipsec-tools' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.2.5' AND
		RPMTestedRelease = '0.4' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- racoon is listening on the network

	(SELECT 'racoon is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%racoon%' AND
		Protocol = 'UDP')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL986
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0505' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL987
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0506' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL988
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0507' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- ethereal version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- ethereal-gnome version is less than 0.10.3-0.30E.2

		(SELECT 'ethereal-gnome version is less than 0.10.3-0.30E.2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'ethereal-gnome' AND
			RPMTestedEpoch = 'NULL' AND
			RPMTestedVersion = '0.10.3' AND
			RPMTestedRelease = '0.30E.2' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- Vulnerable Config
	(SELECT 'Vulnerable Config' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/ethereal is executable
		(SELECT '/usr/bin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ethereal is executable

			(SELECT '/usr/bin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/sbin/ethereal is executable
		(SELECT '/usr/sbin/ethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/sbin/ethereal is executable

			(SELECT '/usr/sbin/ethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/sbin/ethereal' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/tethereal is executable
		(SELECT '/usr/bin/tethereal is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/tethereal is executable

			(SELECT '/usr/bin/tethereal is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/tethereal' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL991
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0523' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- krb5-libs rpm version prior to 1.2.7-24 is installed

	(SELECT 'krb5-libs rpm version prior to 1.2.7-24 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'krb5-libs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.2.7' AND
		RPMTestedRelease = '24' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL993
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0414' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- cvs rpm version prior to 1.11.2-24 is installed

	(SELECT 'cvs rpm version prior to 1.11.2-24 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '24' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL994
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0416' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- cvs rpm version prior to 1.11.2-24 is installed

	(SELECT 'cvs rpm version prior to 1.11.2-24 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '24' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL997
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0461' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kernel version is less than 2.4.21-15.EL

	(SELECT 'kernel version is less than 2.4.21-15.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kernel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.4.21' AND
		RPMTestedRelease = '15.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /proc/tty/driver/serial is world-readable

	(SELECT '/proc/tty/driver/serial is world-readable' FROM RedHat_FileAttributes WHERE
		FilePath = '/proc/tty/driver/serial' AND
		OREAD = '1')

AND EXISTS

	-- /proc/tty/driver/ is world-executable

	(SELECT '/proc/tty/driver/ is world-executable' FROM RedHat_FileAttributes WHERE
		FilePath = '/proc/tty/driver/' AND
		OEXEC = '1')

AND EXISTS

	-- /proc/tty/ is world-executable

	(SELECT '/proc/tty/ is world-executable' FROM RedHat_FileAttributes WHERE
		FilePath = '/proc/tty/' AND
		OEXEC = '1')

AND EXISTS

	-- /proc/ is world-executable

	(SELECT '/proc/ is world-executable' FROM RedHat_FileAttributes WHERE
		FilePath = '/proc/' AND
		OEXEC = '1')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1001
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0417' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- cvs rpm version prior to 1.11.2-24 is installed

	(SELECT 'cvs rpm version prior to 1.11.2-24 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '24' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1003
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0418' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- cvs rpm version prior to 1.11.2-24 is installed

	(SELECT 'cvs rpm version prior to 1.11.2-24 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '24' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1006
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0519' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed

	(SELECT 'squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'squirrelmail' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.4.3' AND
		RPMTestedRelease = '0.e3.1' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- php rpm is installed

	(SELECT 'php rpm is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'php')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening on the network

	(SELECT 'httpd is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

AND EXISTS

	-- /etc/httpd/modules/libphp4.so exists

	(SELECT '/etc/httpd/modules/libphp4.so exists' FROM RedHat_FileAttributes WHERE
		FilePath = '/etc/httpd/modules/libphp4.so')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1012
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0520' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed

	(SELECT 'squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'squirrelmail' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.4.3' AND
		RPMTestedRelease = '0.e3.1' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- php rpm is installed

	(SELECT 'php rpm is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'php')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening on the network

	(SELECT 'httpd is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

AND EXISTS

	-- /etc/httpd/modules/libphp4.so exists

	(SELECT '/etc/httpd/modules/libphp4.so exists' FROM RedHat_FileAttributes WHERE
		FilePath = '/etc/httpd/modules/libphp4.so')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1013
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2003-0984' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kernel version is less than 2.4.21-15.EL

	(SELECT 'kernel version is less than 2.4.21-15.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kernel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.4.21' AND
		RPMTestedRelease = '15.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1017
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0003' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kernel version is less than 2.4.21-15.EL

	(SELECT 'kernel version is less than 2.4.21-15.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kernel-unsupported' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.4.21' AND
		RPMTestedRelease = '15.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1033
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0521' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed

	(SELECT 'squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'squirrelmail' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.4.3' AND
		RPMTestedRelease = '0.e3.1' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- php rpm is installed

	(SELECT 'php rpm is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'php')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- httpd is listening on the network

	(SELECT 'httpd is listening on the network' FROM RedHat_InetListeningServers WHERE
		ProgramName LIKE '%httpd%' AND
		Protocol = 'TCP')

AND EXISTS

	-- /etc/httpd/modules/libphp4.so exists

	(SELECT '/etc/httpd/modules/libphp4.so exists' FROM RedHat_FileAttributes WHERE
		FilePath = '/etc/httpd/modules/libphp4.so')

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1035
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0010' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- kernel version is less than 2.4.21-15.EL

	(SELECT 'kernel version is less than 2.4.21-15.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'kernel-unsupported' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '2.4.21' AND
		RPMTestedRelease = '15.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1042
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0180' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- cvs version is less than 1.11.2-18

	(SELECT 'cvs version is less than 1.11.2-18' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '18' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1049
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0112' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat 9 is installed

	(SELECT 'Red Hat 9 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion = '9')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openssl version is less than 0.9.7a-20

	(SELECT 'openssl version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-devel version is less than 0.9.7a-20

	(SELECT 'openssl-devel version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-devel' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl-perl version is less than 0.9.7a-20

	(SELECT 'openssl-perl version is less than 0.9.7a-20' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl-perl' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.7a' AND
		RPMTestedRelease = '20.2' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096 version is less than 0.9.6-25.9

	(SELECT 'openssl096 version is less than 0.9.6-25.9' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6' AND
		RPMTestedRelease = '25.9' AND
		RPMInstalledVersion = 'earlier')

AND EXISTS

	-- openssl096b version is less than 0.9.6b-15

	(SELECT 'openssl096b version is less than 0.9.6b-15' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openssl096b' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '0.9.6b' AND
		RPMTestedRelease = '15' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1060
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0405' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- cvs version is less than 1.11.2-18

	(SELECT 'cvs version is less than 1.11.2-18' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'cvs' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.11.2' AND
		RPMTestedRelease = '18' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- /usr/bin/cvs is executable
	(SELECT '/usr/bin/cvs is executable' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			UEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			GEXEC = '1')

	OR EXISTS
		-- /usr/bin/cvs is executable

		(SELECT '/usr/bin/cvs is executable' FROM RedHat_FileAttributes WHERE
			FilePath = '/usr/bin/cvs' AND
			OEXEC = '1'))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL1065
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0179' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- ix86 architecture

	(SELECT 'ix86 architecture' FROM RedHat_Uname WHERE
		MachineClass LIKE 'i%86%')

AND EXISTS

	-- openoffice version is less than 1.1.0-15.EL

	(SELECT 'openoffice version is less than 1.1.0-15.EL' FROM RedHat_RPMVersionCompare WHERE
		RPMName = 'openoffice' AND
		RPMTestedEpoch = 'NULL' AND
		RPMTestedVersion = '1.1.0' AND
		RPMTestedRelease = '15.EL' AND
		RPMInstalledVersion = 'earlier')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

AND EXISTS

	-- OpenOffice Permissions
	(SELECT 'OpenOffice Permissions' FROM Placeholder WHERE

	EXISTS
		-- /usr/bin/oocalc is executable
		(SELECT '/usr/bin/oocalc is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/oocalc is executable

			(SELECT '/usr/bin/oocalc is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oocalc' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/oocalc is executable

			(SELECT '/usr/bin/oocalc is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oocalc' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/oocalc is executable

			(SELECT '/usr/bin/oocalc is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oocalc' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/oodraw is executable
		(SELECT '/usr/bin/oodraw is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/oodraw is executable

			(SELECT '/usr/bin/oodraw is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oodraw' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/oodraw is executable

			(SELECT '/usr/bin/oodraw is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oodraw' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/oodraw is executable

			(SELECT '/usr/bin/oodraw is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oodraw' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/oofice is executable
		(SELECT '/usr/bin/oofice is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/oofice is executable

			(SELECT '/usr/bin/oofice is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oofice' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/oofice is executable

			(SELECT '/usr/bin/oofice is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oofice' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/oofice is executable

			(SELECT '/usr/bin/oofice is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oofice' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/ooimpress is executable
		(SELECT '/usr/bin/ooimpress is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/ooimpress is executable

			(SELECT '/usr/bin/ooimpress is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ooimpress' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/ooimpress is executable

			(SELECT '/usr/bin/ooimpress is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ooimpress' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/ooimpress is executable

			(SELECT '/usr/bin/ooimpress is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/ooimpress' AND
				OEXEC = '1'))

	OR EXISTS
		-- /usr/bin/oowriter is executable
		(SELECT '/usr/bin/oowriter is executable' FROM Placeholder WHERE

		EXISTS
			-- /usr/bin/oowriter is executable

			(SELECT '/usr/bin/oowriter is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oowriter' AND
				UEXEC = '1')

		OR EXISTS
			-- /usr/bin/oowriter is executable

			(SELECT '/usr/bin/oowriter is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oowriter' AND
				GEXEC = '1')

		OR EXISTS
			-- /usr/bin/oowriter is executable

			(SELECT '/usr/bin/oowriter is executable' FROM RedHat_FileAttributes WHERE
				FilePath = '/usr/bin/oowriter' AND
				OEXEC = '1')))

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL2819
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0427' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0
	(SELECT 'kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0' FROM Placeholder WHERE

	EXISTS
		-- kernel rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-hugemem' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier'))

AND EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL2915
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0554' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0
	(SELECT 'kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0' FROM Placeholder WHERE

	EXISTS
		-- kernel rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-hugemem' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL2961
--
-- SchemaVersion: 3.00
--

SELECT 'CAN-2004-0495' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0
	(SELECT 'kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0' FROM Placeholder WHERE

	EXISTS
		-- kernel rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-hugemem' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0

		(SELECT 'kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'kernel-smp' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '2.4.21' AND
			RPMTestedRelease = '15.0.2.EL' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

--
-- OVAL-id: OVAL3657
--
-- SchemaVersion: 3.00
--

SELECT 'CVE-2002-1363' FROM Placeholder WHERE

-- ### BEGIN VULNERABLE SOFTWARE EXISTS
--

EXISTS

	-- Red Hat Enterprise 3 is installed

	(SELECT 'Red Hat Enterprise 3 is installed' FROM RedHat_RPMinfo WHERE
		RPMName = 'redhat-release' AND
		RPMVersion LIKE '3_S%')

AND EXISTS

	-- libpng or libpng-devel rpm older than 1.2.2-24, Epoch 2 OR libpng10or libpng10-devel rpm older than 1.0.13-14, Epoch 0
	(SELECT 'libpng or libpng-devel rpm older than 1.2.2-24, Epoch 2 OR libpng10or libpng10-devel rpm older than 1.0.13-14, Epoch 0' FROM Placeholder WHERE

	EXISTS
		-- libpng rpm older than 1.2.2-24, Epoch 2

		(SELECT 'libpng rpm older than 1.2.2-24, Epoch 2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng' AND
			RPMTestedEpoch = '2' AND
			RPMTestedVersion = '1.2.2' AND
			RPMTestedRelease = '24' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libpng-devel rpm older than 1.2.2-24, Epoch 2

		(SELECT 'libpng-devel rpm older than 1.2.2-24, Epoch 2' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng-devel' AND
			RPMTestedEpoch = '2' AND
			RPMTestedVersion = '1.2.2' AND
			RPMTestedRelease = '24' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libpng10-devel rpm older than 1.0.13-14, Epoch 0

		(SELECT 'libpng10-devel rpm older than 1.0.13-14, Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng10-devel' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '1.0.13' AND
			RPMTestedRelease = '14' AND
			RPMInstalledVersion = 'earlier')

	OR EXISTS
		-- libpng10 rpm older than 1.0.13-14, Epoch 0

		(SELECT 'libpng10 rpm older than 1.0.13-14, Epoch 0' FROM RedHat_RPMVersionCompare WHERE
			RPMName = 'libpng10' AND
			RPMTestedEpoch = '0' AND
			RPMTestedVersion = '1.0.13' AND
			RPMTestedRelease = '14' AND
			RPMInstalledVersion = 'earlier'))

--
-- ### END VULNERABLE SOFTWARE EXISTS

-- ### BEGIN VULNERABLE CONFIGURATION EXISTS
--

--
-- ### END VULNERABLE CONFIGURATION
;

