Test Kennung:	1.3.6.1.4.1.25623.1.0.71480
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 2502-1 (python-crypto)
Zusammenfassung:	The remote host is missing an update to python-crypto;announced via advisory DSA 2502-1.
Beschreibung:	Summary: The remote host is missing an update to python-crypto announced via advisory DSA 2502-1. Vulnerability Insight: It was discovered that the ElGamal code in PythonCrypto, a collection of cryptographic algorithms and protocols for Python used insecure insufficient prime numbers in key generation, which lead to a weakened signature or public key space, allowing easier brute force attacks on such keys. For the stable distribution (squeeze), this problem has been fixed in version 2.1.0-2+squeeze1. For the unstable distribution (sid), this problem has been fixed in version 2.6-1. Solution: We recommend that you upgrade your python-crypto packages. After CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2417 BugTraq ID: 53687 http://www.securityfocus.com/bid/53687 Debian Security Information: DSA-2502 (Google Search) http://www.debian.org/security/2012/dsa-2502 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:117 https://bugs.launchpad.net/pycrypto/+bug/985164 https://github.com/Legrandin/pycrypto/commit/9f912f13df99ad3421eff360d6a62d7dbec755c2 http://www.openwall.com/lists/oss-security/2012/05/25/1 http://www.osvdb.org/82279 http://secunia.com/advisories/49263 SuSE Security Announcement: openSUSE-SU-2012:0830 (Google Search) https://hermes.opensuse.org/messages/15083589 XForce ISS Database: pycrypto-keys-weak-security(75871) https://exchange.xforce.ibmcloud.com/vulnerabilities/75871
Copyright	Copyright (C) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.