Test Kennung:	1.3.6.1.4.1.25623.1.0.57224
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-100 (openssh)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to openssh announced via advisory TLSA-2005-100. OpenSSH is a FREE version of the SSH protocol suite of network connectivity tools that increasing numbers of people on the Internet are coming to rely on. The sshd in OpenSSH, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts. This vulnerability may allow remote users to bypass access control rules. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2005-100 Risk factor : High
Querverweis:	Common Vulnerability Exposure (CVE) ID: CAN-2005-2798 BugTraq ID: 14729 http://www.securityfocus.com/bid/14729 HPdes Security Advisory: HPSBUX02090 http://www.securityfocus.com/archive/1/421411/100/0/threaded HPdes Security Advisory: SSRT051058 http://www.mandriva.com/security/advisories?name=MDKSA-2005:172 http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html http://www.osvdb.org/19141 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717 http://www.redhat.com/support/errata/RHSA-2005-527.html SCO Security Bulletin: SCOSA-2005.53 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt http://securitytracker.com/id?1014845 http://secunia.com/advisories/16686 http://secunia.com/advisories/17077 http://secunia.com/advisories/17245 http://secunia.com/advisories/18010 http://secunia.com/advisories/18406 http://secunia.com/advisories/18507 http://secunia.com/advisories/18661 http://secunia.com/advisories/18717 SuSE Security Announcement: SUSE-SR:2006:003 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html https://usn.ubuntu.com/209-1/ http://www.vupen.com/english/advisories/2006/0144 XForce ISS Database: hpux-secure-shell-dos(24064) https://exchange.xforce.ibmcloud.com/vulnerabilities/24064
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.