Test Kennung:	1.3.6.1.4.1.25623.1.0.703207
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 3207-1 (shibboleth-sp2 - security update)
Zusammenfassung:	A denial of service vulnerability;was found in the Shibboleth (an federated identity framework) Service Provider.;When processing certain malformed SAML message generated by an authenticated;attacker, the daemon could crash.
Beschreibung:	Summary: A denial of service vulnerability was found in the Shibboleth (an federated identity framework) Service Provider. When processing certain malformed SAML message generated by an authenticated attacker, the daemon could crash. Affected Software/OS: shibboleth-sp2 on Debian Linux Solution: For the stable distribution (wheezy), this problem has been fixed in version 2.4.3+dfsg-5+deb7u1. For the upcoming stable distribution (jessie), this problem has been fixed in version 2.5.3+dfsg-2. For the unstable distribution (sid), this problem has been fixed in version 2.5.3+dfsg-2. We recommend that you upgrade your shibboleth-sp2 packages. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2684 BugTraq ID: 73314 http://www.securityfocus.com/bid/73314 Debian Security Information: DSA-3207 (Google Search) http://www.debian.org/security/2015/dsa-3207
Copyright	Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.