Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.840735
Categoría:Ubuntu Local Security Checks
Título:Ubuntu Update for firefox USN-1197-3
Resumen:Ubuntu Update for Linux kernel vulnerabilities USN-1197-3
Descripción:Summary:
Ubuntu Update for Linux kernel vulnerabilities USN-1197-3

Vulnerability Insight:
USN-1197-1 partially addressed an issue with Dutch Certificate Authority
DigiNotar mis-issuing fraudulent certificates. This update actively
distrusts the DigiNotar root certificate as well as several intermediary
certificates. Also included in this list of distrusted certificates are the
Staat der Nederlanden root certificates.

Original advisory details:

It was discovered that Dutch Certificate Authority DigiNotar, had
mis-issued multiple fraudulent certificates. These certificates could allow
an attacker to perform a 'man in the middle' (MITM) attack which would make
the user believe their connection is secure, but is actually being
monitored.

For the protection of its users, Mozilla has removed the DigiNotar
certificate. Sites using certificates issued by DigiNotar will need to seek
another certificate vendor.

We are currently aware of a regression that blocks one of two Staat der
Nederlanden root certificates which are believed to still be secure. This
regression is being tracked at the referenced bugtracker.

Affected Software/OS:
firefox on Ubuntu 11.04,
Ubuntu 10.10,
Ubuntu 10.04 LTS

Solution:
Please Install the Updated Packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

CopyrightCopyright (c) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.