Test Kennung:	1.3.6.1.4.1.25623.1.0.880861
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for openssl097a CESA-2009:0004 centos5 i386
Zusammenfassung:	The remote host is missing an update for the 'openssl097a'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openssl097a' package(s) announced via the referenced advisory. Vulnerability Insight: OpenSSL is a toolkit that implements Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength, general purpose, cryptography library. The Google security team discovered a flaw in the way OpenSSL checked the verification of certificates. An attacker in control of a malicious server, or able to effect a 'man in the middle' attack, could present a malformed SSL/TLS signature from a certificate chain to a vulnerable client and bypass validation. (CVE-2008-5077) All OpenSSL users should upgrade to these updated packages, which contain backported patches to resolve these issues. For the update to take effect, all running OpenSSL client applications must be restarted, or the system rebooted. Affected Software/OS: openssl097a on CentOS 5 Solution: Please install the updated packages. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5077 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html BugTraq ID: 33150 http://www.securityfocus.com/bid/33150 Bugtraq: 20090107 [oCERT-2008-016] Multiple OpenSSL signature verification API misuses (Google Search) http://www.securityfocus.com/archive/1/499827/100/0/threaded Bugtraq: 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim (Google Search) http://www.securityfocus.com/archive/1/502322/100/0/threaded Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html http://security.gentoo.org/glsa/glsa-200902-02.xml HPdes Security Advisory: HPSBMA02426 http://marc.info/?l=bugtraq&m=124277349419254&w=2 HPdes Security Advisory: HPSBOV02540 http://marc.info/?l=bugtraq&m=127678688104458&w=2 HPdes Security Advisory: HPSBUX02418 http://marc.info/?l=bugtraq&m=123859864430555&w=2 HPdes Security Advisory: SSRT090002 HPdes Security Advisory: SSRT090053 http://www.ocert.org/advisories/ocert-2008-016.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155 http://www.redhat.com/support/errata/RHSA-2009-0004.html http://www.securitytracker.com/id?1021523 http://secunia.com/advisories/33338 http://secunia.com/advisories/33394 http://secunia.com/advisories/33436 http://secunia.com/advisories/33557 http://secunia.com/advisories/33673 http://secunia.com/advisories/33765 http://secunia.com/advisories/34211 http://secunia.com/advisories/35074 http://secunia.com/advisories/35108 http://secunia.com/advisories/39005 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796 http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1 SuSE Security Announcement: SUSE-SU-2011:0847 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html SuSE Security Announcement: openSUSE-SU-2011:0845 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html https://usn.ubuntu.com/704-1/ http://www.vupen.com/english/advisories/2009/0040 http://www.vupen.com/english/advisories/2009/0289 http://www.vupen.com/english/advisories/2009/0362 http://www.vupen.com/english/advisories/2009/0558 http://www.vupen.com/english/advisories/2009/0904 http://www.vupen.com/english/advisories/2009/0913 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1338
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.