Test ID:	1.3.6.1.4.1.25623.1.0.105692
Category:	CISCO
Title:	Cisco NX-OS: Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
Summary:	On June 11, 2015, the OpenSSL Project released a security advisory detailing six distinct; vulnerabilities, and another fix that provides hardening protections against exploits as described; in the Logjam research.;; Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more; vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service; (DoS) condition or corrupt portions of OpenSSL process memory.;; Cisco will release software updates that address these vulnerabilities.;; Workarounds that mitigate these vulnerabilities may be available.
Description:	Summary: On June 11, 2015, the OpenSSL Project released a security advisory detailing six distinct vulnerabilities, and another fix that provides hardening protections against exploits as described in the Logjam research. Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or corrupt portions of OpenSSL process memory. Cisco will release software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities may be available. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1791 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html BugTraq ID: 75161 http://www.securityfocus.com/bid/75161 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 Cisco Security Advisory: 20150612 Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl Debian Security Information: DSA-3287 (Google Search) http://www.debian.org/security/2015/dsa-3287 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html https://security.gentoo.org/glsa/201506-02 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 HPdes Security Advisory: HPSBUX03388 http://marc.info/?l=bugtraq&m=143880121627664&w=2 HPdes Security Advisory: SSRT102180 NETBSD Security Advisory: NetBSD-SA2015-008 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc RedHat Security Advisories: RHSA-2015:1115 http://rhn.redhat.com/errata/RHSA-2015-1115.html http://www.securitytracker.com/id/1032479 SuSE Security Announcement: SUSE-SU-2015:1143 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html SuSE Security Announcement: SUSE-SU-2015:1150 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html SuSE Security Announcement: SUSE-SU-2015:1182 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html SuSE Security Announcement: SUSE-SU-2015:1184 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html SuSE Security Announcement: SUSE-SU-2015:1185 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html SuSE Security Announcement: openSUSE-SU-2015:1139 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html SuSE Security Announcement: openSUSE-SU-2016:0640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html http://www.ubuntu.com/usn/USN-2639-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-1788 BugTraq ID: 75158 http://www.securityfocus.com/bid/75158 http://www.securitytracker.com/id/1032564 SuSE Security Announcement: SUSE-SU-2015:1181 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html SuSE Security Announcement: openSUSE-SU-2015:1277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html Common Vulnerability Exposure (CVE) ID: CVE-2015-1789 BugTraq ID: 75156 http://www.securityfocus.com/bid/75156 HPdes Security Advisory: HPSBGN03371 http://marc.info/?l=bugtraq&m=143654156615516&w=2 RedHat Security Advisories: RHSA-2015:1197 http://rhn.redhat.com/errata/RHSA-2015-1197.html SuSE Security Announcement: SUSE-SU-2015:1183 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2015-1790 BugTraq ID: 75157 http://www.securityfocus.com/bid/75157 Common Vulnerability Exposure (CVE) ID: CVE-2015-1792 BugTraq ID: 75154 http://www.securityfocus.com/bid/75154 Common Vulnerability Exposure (CVE) ID: CVE-2014-8176 BugTraq ID: 75159 http://www.securityfocus.com/bid/75159 RedHat Security Advisories: RHSA-2016:2957 http://rhn.redhat.com/errata/RHSA-2016-2957.html
Copyright	This script is Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.