Test Kennung:	1.3.6.1.4.1.25623.1.0.53088
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-67 (openssl)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to openssl announced via advisory TLSA-2005-67. The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. The OpenSSL has a private key information leak on Intel Hyper-Threading technology. This vulnerability may allow local users to gain private key information. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2005-67 Risk factor : High CVSS Score: 7.2
Querverweis:	BugTraq ID: 12724 Common Vulnerability Exposure (CVE) ID: CVE-2005-0109 http://www.securityfocus.com/bid/12724 CERT/CC vulnerability note: VU#911878 http://www.kb.cert.org/vuls/id/911878 FreeBSD Security Advisory: FreeBSD-SA-05:09 http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754 http://www.daemonology.net/hyperthreading-considered-harmful/ http://www.daemonology.net/papers/htt.pdf http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2 http://marc.info/?l=freebsd-security&m=110994370429609&w=2 http://marc.info/?l=openbsd-misc&m=110995101417256&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747 http://www.redhat.com/support/errata/RHSA-2005-476.html http://www.redhat.com/support/errata/RHSA-2005-800.html SCO Security Bulletin: SCOSA-2005.24 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt http://securitytracker.com/id?1013967 http://secunia.com/advisories/15348 http://secunia.com/advisories/18165 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1 http://www.vupen.com/english/advisories/2005/0540 http://www.vupen.com/english/advisories/2005/3002
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.