Test Kennung:	1.3.6.1.4.1.25623.1.0.66100
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 1916-1 (kdelibs)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to kdelibs announced via advisory DSA 1916-1. Dan Kaminsky and Moxie Marlinspike discovered that kdelibs, core libraries from the official KDE release, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. For the oldstable distribution (etch), this problem has been fixed in version 4:3.5.5a.dfsg.1-8etch3 Due to a bug in the archive system, the fix for the stable distribution (lenny), will be released as version 4:3.5.10.dfsg.1-0lenny3 once it is available. For the testing distribution (squeeze), and the unstable distribution (sid), this problem has been fixed in version 4:3.5.10.dfsg.1-2.1 We recommend that you upgrade your kdelibs pakcages. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%201916-1 CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2702 http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 http://www.mandriva.com/security/advisories?name=MDVSA-2011:162 http://secunia.com/advisories/36468 http://www.vupen.com/english/advisories/2009/2532
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.