Test Kennung:	1.3.6.1.4.1.25623.1.0.807096
Kategorie:	General
Titel:	OpenSSL SSLv2 DROWN Attack Vulnerability (Linux)
Zusammenfassung:	OpenSSL is prone to the DROWN attack vulnerability.
Beschreibung:	Summary: OpenSSL is prone to the DROWN attack vulnerability. Vulnerability Insight: The flaw is due a padding oracle flaw found in the SSLv2 protocol, so that by exploiting the server's support of SSLv2, an attacker can decrypt properly secured TLS traffic. Vulnerability Impact: Successful exploitation will allow a remote attacker to decrypt traffic between clients and non-vulnerable servers and to gain usernames, passwords, credit card numbers, emails, instant messages, and sensitive documents and also to impersonate a secure website and intercept or change the content the user sees. Affected Software/OS: OpenSSL versions before 1.0.1s and 1.0.2 before 1.0.2g. Solution: Upgrade to OpenSSL 1.0.1s or 1.0.2g or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0800 BugTraq ID: 83733 http://www.securityfocus.com/bid/83733 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 CERT/CC vulnerability note: VU#583776 https://www.kb.cert.org/vuls/id/583776 Cisco Security Advisory: 20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl FreeBSD Security Advisory: FreeBSD-SA-16:12 https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc https://security.gentoo.org/glsa/201603-15 HPdes Security Advisory: HPSBGN03569 http://marc.info/?l=bugtraq&m=145983526810210&w=2 HPdes Security Advisory: HPSBMU03573 http://marc.info/?l=bugtraq&m=146133665209436&w=2 HPdes Security Advisory: HPSBMU03575 http://marc.info/?l=bugtraq&m=146108058503441&w=2 https://drownattack.com https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03 RedHat Security Advisories: RHSA-2016:1519 http://rhn.redhat.com/errata/RHSA-2016-1519.html http://www.securitytracker.com/id/1035133 SuSE Security Announcement: SUSE-SU-2016:0617 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html SuSE Security Announcement: SUSE-SU-2016:0620 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html SuSE Security Announcement: SUSE-SU-2016:0621 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html SuSE Security Announcement: SUSE-SU-2016:0624 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html SuSE Security Announcement: SUSE-SU-2016:0631 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html SuSE Security Announcement: SUSE-SU-2016:0641 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html SuSE Security Announcement: SUSE-SU-2016:0678 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html SuSE Security Announcement: SUSE-SU-2016:1057 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html SuSE Security Announcement: openSUSE-SU-2016:0627 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html SuSE Security Announcement: openSUSE-SU-2016:0628 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html SuSE Security Announcement: openSUSE-SU-2016:0637 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html SuSE Security Announcement: openSUSE-SU-2016:0638 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:0640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html SuSE Security Announcement: openSUSE-SU-2016:0720 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html SuSE Security Announcement: openSUSE-SU-2016:1239 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html SuSE Security Announcement: openSUSE-SU-2016:1241 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.