Test Kennung:	1.3.6.1.4.1.25623.1.0.63743
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200904-05 (ntp)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory GLSA 200904-05. An error in the OpenSSL certificate chain validation in ntp might allow for spoofing attacks. Solution: All ntp users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-misc/ntp-4.2.4_p6' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200904-05 http://bugs.gentoo.org/show_bug.cgi?id=254098 http://www.gentoo.org/security/en/glsa/glsa-200902-02.xml CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5077 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html BugTraq ID: 33150 http://www.securityfocus.com/bid/33150 Bugtraq: 20090107 [oCERT-2008-016] Multiple OpenSSL signature verification API misuses (Google Search) http://www.securityfocus.com/archive/1/499827/100/0/threaded Bugtraq: 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim (Google Search) http://www.securityfocus.com/archive/1/502322/100/0/threaded Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html http://security.gentoo.org/glsa/glsa-200902-02.xml HPdes Security Advisory: HPSBMA02426 http://marc.info/?l=bugtraq&m=124277349419254&w=2 HPdes Security Advisory: HPSBOV02540 http://marc.info/?l=bugtraq&m=127678688104458&w=2 HPdes Security Advisory: HPSBUX02418 http://marc.info/?l=bugtraq&m=123859864430555&w=2 HPdes Security Advisory: SSRT090002 HPdes Security Advisory: SSRT090053 http://www.ocert.org/advisories/ocert-2008-016.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155 http://www.redhat.com/support/errata/RHSA-2009-0004.html http://www.securitytracker.com/id?1021523 http://secunia.com/advisories/33338 http://secunia.com/advisories/33394 http://secunia.com/advisories/33436 http://secunia.com/advisories/33557 http://secunia.com/advisories/33673 http://secunia.com/advisories/33765 http://secunia.com/advisories/34211 http://secunia.com/advisories/35074 http://secunia.com/advisories/35108 http://secunia.com/advisories/39005 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796 http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1 SuSE Security Announcement: SUSE-SU-2011:0847 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html SuSE Security Announcement: openSUSE-SU-2011:0845 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html https://usn.ubuntu.com/704-1/ http://www.vupen.com/english/advisories/2009/0040 http://www.vupen.com/english/advisories/2009/0289 http://www.vupen.com/english/advisories/2009/0362 http://www.vupen.com/english/advisories/2009/0558 http://www.vupen.com/english/advisories/2009/0904 http://www.vupen.com/english/advisories/2009/0913 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1338 Common Vulnerability Exposure (CVE) ID: CVE-2009-0021 https://lists.ntp.org/pipermail/announce/2009-January/000055.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035 http://www.redhat.com/support/errata/RHSA-2009-0046.html http://www.securitytracker.com/id?1021533 http://secunia.com/advisories/33406 http://secunia.com/advisories/33558 http://secunia.com/advisories/33648 http://secunia.com/advisories/34642 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177 SuSE Security Announcement: SUSE-SR:2009:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html http://www.vupen.com/english/advisories/2009/0042
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.