Test Kennung:	1.3.6.1.4.1.25623.1.0.892260
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for mcabber (DLA-2260-1)
Zusammenfassung:	The remote host is missing an update for the 'mcabber'; package(s) announced via the DLA-2260-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'mcabber' package(s) announced via the DLA-2260-1 advisory. Vulnerability Insight: It was discovered that there was a 'roster push attack' in mcabber, a console-based Jabber (XMPP) client. This is identical to CVE-2015-8688 for gajim. Affected Software/OS: 'mcabber' package(s) on Debian Linux. Solution: For Debian 8 'Jessie', this problem has been fixed in version 0.10.2-1+deb8u1. We recommend that you upgrade your mcabber packages. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8688 Debian Security Information: DSA-3492 (Google Search) http://www.debian.org/security/2016/dsa-3492 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175526.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175503.html http://gultsch.de/gajim_roster_push_and_message_interception.html SuSE Security Announcement: openSUSE-SU-2016:0102 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2016-9928 http://www.openwall.com/lists/oss-security/2016/12/11/2 http://www.openwall.com/lists/oss-security/2017/02/09/29 http://www.securityfocus.com/bid/94862 https://gultsch.de/gajim_roster_push_and_message_interception.html https://lists.debian.org/debian-lts-announce/2020/06/msg00031.html https://usn.ubuntu.com/4506-1/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.