Test Kennung:	1.3.6.1.4.1.25623.1.0.55184
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-86 (nss_ldap)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to nss_ldap announced via advisory TLSA-2005-86. The nss_ldap is a set of C library extensions which allows X.500 and LDAP directory servers to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services and shadow passwords (instead of or in addition to using flat files or NIS). The pam_ldap and nss_ldap would not use TLS for referred connections if they are referred to a master after connecting to a slave. The pam_ldap and nss_ldap may cause a password to be sent in cleartext and allows remote attackers to sniff the password. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2005-86 Risk factor : Medium CVSS Score: 5.0
Querverweis:	BugTraq ID: 14126 BugTraq ID: 14125 Common Vulnerability Exposure (CVE) ID: CVE-2005-2069 http://www.securityfocus.com/bid/14125 http://www.securityfocus.com/bid/14126 http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0060.html http://www.gentoo.org/security/en/glsa/glsa-200507-13.xml http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:121 http://bugzilla.padl.com/show_bug.cgi?id=210 http://bugzilla.padl.com/show_bug.cgi?id=211 http://www.openldap.org/its/index.cgi/Incoming?id=3791 http://www.osvdb.org/17692 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9445 http://www.redhat.com/support/errata/RHSA-2005-751.html http://www.redhat.com/support/errata/RHSA-2005-767.html http://secunia.com/advisories/17233 http://secunia.com/advisories/17845 http://secunia.com/advisories/21520 http://www.ubuntu.com/usn/usn-152-1 XForce ISS Database: ldap-tls-information-disclosure(21245) https://exchange.xforce.ibmcloud.com/vulnerabilities/21245
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.