Test Kennung:	1.3.6.1.4.1.25623.1.0.704611
Kategorie:	Debian Local Security Checks
Titel:	Debian: Security Advisory for opensmtpd (DSA-4611-1)
Zusammenfassung:	The remote host is missing an update for the 'opensmtpd'; package(s) announced via the DSA-4611-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'opensmtpd' package(s) announced via the DSA-4611-1 advisory. Vulnerability Insight: Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of email addresses which could result in the execution of arbitrary commands as root. In addition this update fixes a denial of service by triggering an opportunistic TLS downgrade. Affected Software/OS: 'opensmtpd' package(s) on Debian Linux. Solution: For the oldstable distribution (stretch), these problems have been fixed in version 6.0.2p1-2+deb9u2. For the stable distribution (buster), these problems have been fixed in version 6.0.3p1-5+deb10u3. This update also includes non-security bugfixes which were already lined up for the Buster 10.3 point release. We recommend that you upgrade your opensmtpd packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-7247 Bugtraq: 20200129 [SECURITY] [DSA 4611-1] opensmtpd security update (Google Search) https://seclists.org/bugtraq/2020/Jan/51 CERT/CC vulnerability note: VU#390745 https://www.kb.cert.org/vuls/id/390745 Debian Security Information: DSA-4611 (Google Search) https://www.debian.org/security/2020/dsa-4611 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/ http://seclists.org/fulldisclosure/2020/Jan/49 http://packetstormsecurity.com/files/156137/OpenBSD-OpenSMTPD-Privilege-Escalation-Code-Execution.html http://packetstormsecurity.com/files/156145/OpenSMTPD-6.6.2-Remote-Code-Execution.html http://packetstormsecurity.com/files/156249/OpenSMTPD-MAIL-FROM-Remote-Code-Execution.html http://packetstormsecurity.com/files/156295/OpenSMTPD-6.6.1-Local-Privilege-Escalation.html http://packetstormsecurity.com/files/162093/OpenBSD-OpenSMTPD-6.6-Remote-Code-Execution.html http://www.openwall.com/lists/oss-security/2020/01/28/3 https://usn.ubuntu.com/4268-1/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.