ID de Prueba:	1.3.6.1.4.1.25623.1.0.63720
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2009:087 (openssl)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to openssl announced via advisory MDVSA-2009:087. A security vulnerability has been identified and fixed in OpenSSL, which could crash applications using OpenSSL library when parsing malformed certificates (CVE-2009-0590). The updated packages have been patched to prevent this. Affected: 2008.0, 2008.1, 2009.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2009:087 CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0590 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html BugTraq ID: 34256 http://www.securityfocus.com/bid/34256 Bugtraq: 20090403 rPSA-2009-0057-1 m2crypto openssl openssl-scripts (Google Search) http://www.securityfocus.com/archive/1/502429/100/0/threaded Bugtraq: 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console (Google Search) http://www.securityfocus.com/archive/1/515055/100/0/threaded Debian Security Information: DSA-1763 (Google Search) http://www.debian.org/security/2009/dsa-1763 FreeBSD Security Advisory: FreeBSD-SA-09:08 http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc HPdes Security Advisory: HPSBMA02447 http://marc.info/?l=bugtraq&m=125017764422557&w=2 HPdes Security Advisory: HPSBOV02540 http://marc.info/?l=bugtraq&m=127678688104458&w=2 HPdes Security Advisory: HPSBUX02435 http://marc.info/?l=bugtraq&m=124464882609472&w=2 HPdes Security Advisory: SSRT090059 HPdes Security Advisory: SSRT090062 http://www.mandriva.com/security/advisories?name=MDVSA-2009:087 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057 http://lists.vmware.com/pipermail/security-announce/2010/000082.html https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html NETBSD Security Advisory: NetBSD-SA2009-008 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc http://www.osvdb.org/52864 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996 http://www.redhat.com/support/errata/RHSA-2009-1335.html http://securitytracker.com/id?1021905 http://secunia.com/advisories/34411 http://secunia.com/advisories/34460 http://secunia.com/advisories/34509 http://secunia.com/advisories/34561 http://secunia.com/advisories/34666 http://secunia.com/advisories/34896 http://secunia.com/advisories/34960 http://secunia.com/advisories/35065 http://secunia.com/advisories/35181 http://secunia.com/advisories/35380 http://secunia.com/advisories/35729 http://secunia.com/advisories/36533 http://secunia.com/advisories/36701 http://secunia.com/advisories/38794 http://secunia.com/advisories/38834 http://secunia.com/advisories/42467 http://secunia.com/advisories/42724 http://secunia.com/advisories/42733 http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1 SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html SuSE Security Announcement: SUSE-SU-2011:0847 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html SuSE Security Announcement: openSUSE-SU-2011:0845 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html http://www.ubuntu.com/usn/usn-750-1 http://www.vupen.com/english/advisories/2009/0850 http://www.vupen.com/english/advisories/2009/1020 http://www.vupen.com/english/advisories/2009/1175 http://www.vupen.com/english/advisories/2009/1220 http://www.vupen.com/english/advisories/2009/1548 http://www.vupen.com/english/advisories/2010/0528 http://www.vupen.com/english/advisories/2010/3126 XForce ISS Database: openssl-asn1-stringprintex-dos(49431) https://exchange.xforce.ibmcloud.com/vulnerabilities/49431
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.