Test Kennung:	1.3.6.1.4.1.25623.1.0.804924
Kategorie:	General
Titel:	Mozilla Firefox RSA Spoof Vulnerability September14 (Macosx)
Zusammenfassung:	This host is installed with Mozilla Firefox; and is prone to spoofing vulnerability.
Beschreibung:	Summary: This host is installed with Mozilla Firefox and is prone to spoofing vulnerability. Vulnerability Insight: Flaw exists due to improper handling of ASN.1 values while parsing RSA signature Vulnerability Impact: Successful exploitation will allow attackers to conduct spoofing attacks. Affected Software/OS: Mozilla Firefox before 32.0.3 on Macosx Solution: Upgrade to Mozilla Firefox version 32.0.3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 70116 Common Vulnerability Exposure (CVE) ID: CVE-2014-1568 http://www.securityfocus.com/bid/70116 CERT/CC vulnerability note: VU#772676 http://www.kb.cert.org/vuls/id/772676 Debian Security Information: DSA-3033 (Google Search) http://www.debian.org/security/2014/dsa-3033 Debian Security Information: DSA-3034 (Google Search) http://www.debian.org/security/2014/dsa-3034 Debian Security Information: DSA-3037 (Google Search) http://www.debian.org/security/2014/dsa-3037 https://security.gentoo.org/glsa/201504-01 RedHat Security Advisories: RHSA-2014:1307 http://rhn.redhat.com/errata/RHSA-2014-1307.html RedHat Security Advisories: RHSA-2014:1354 http://rhn.redhat.com/errata/RHSA-2014-1354.html RedHat Security Advisories: RHSA-2014:1371 http://rhn.redhat.com/errata/RHSA-2014-1371.html http://secunia.com/advisories/61540 http://secunia.com/advisories/61574 http://secunia.com/advisories/61575 http://secunia.com/advisories/61576 http://secunia.com/advisories/61583 SuSE Security Announcement: SUSE-SU-2014:1220 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00032.html SuSE Security Announcement: openSUSE-SU-2014:1224 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00036.html SuSE Security Announcement: openSUSE-SU-2014:1232 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00039.html http://www.ubuntu.com/usn/USN-2360-1 http://www.ubuntu.com/usn/USN-2360-2 http://www.ubuntu.com/usn/USN-2361-1 XForce ISS Database: mozilla-nss-cve20141568-sec-bypass(96194) https://exchange.xforce.ibmcloud.com/vulnerabilities/96194
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.