Test Kennung:	1.3.6.1.4.1.25623.1.0.69810
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2011:0959
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2011:0959. Mutt is a text-mode mail user agent. A flaw was found in the way Mutt verified SSL certificates. When a server presented an SSL certificate chain, Mutt could ignore a server hostname check failure. A remote attacker able to get a certificate from a trusted Certificate Authority could use this flaw to trick Mutt into accepting a certificate issued for a different hostname, and perform man-in-the-middle attacks against Mutt's SSL connections. (CVE-2011-1429) All Mutt users should upgrade to this updated package, which contains a backported patch to correct this issue. All running instances of Mutt must be restarted for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2011-0959.html Risk factor : High CVSS Score: 5.8
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1429 BugTraq ID: 46803 http://www.securityfocus.com/bid/46803 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061353.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061356.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061461.html http://seclists.org/fulldisclosure/2011/Mar/87 http://www.redhat.com/support/errata/RHSA-2011-0959.html http://secunia.com/advisories/44937 http://securityreason.com/securityalert/8143 XForce ISS Database: mutt-smtptls-weak-security(66015) https://exchange.xforce.ibmcloud.com/vulnerabilities/66015
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.