Test Kennung:	1.3.6.1.4.1.25623.1.0.62958
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200812-09 (opensc)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory GLSA 200812-09. Smart cards formatted using OpenSC do not sufficiently protect the PIN, allowing attackers to reset it. Solution: All OpenSC users should upgrade to the latest version, and then check and update their smart cards: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-libs/opensc-0.11.6' # pkcs15-tool --test-update # pkcs15-tool --test-update --update http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200812-09 http://bugs.gentoo.org/show_bug.cgi?id=233543 CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:C/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2235 BugTraq ID: 30473 http://www.securityfocus.com/bid/30473 Debian Security Information: DSA-1627 (Google Search) https://www.debian.org/security/2008/dsa-1627 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html http://security.gentoo.org/glsa/glsa-200812-09.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:183 http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html http://secunia.com/advisories/31330 http://secunia.com/advisories/31360 http://secunia.com/advisories/32099 http://secunia.com/advisories/33115 http://secunia.com/advisories/34362 SuSE Security Announcement: SUSE-SR:2008:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html XForce ISS Database: opensc-smartcard-cryptotoken-weak-security(44140) https://exchange.xforce.ibmcloud.com/vulnerabilities/44140
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.