Test ID:	1.3.6.1.4.1.25623.1.1.4.2014.0818.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2014:0818-1)
Summary:	The remote host is missing an update for the 'openssh' package(s) announced via the SUSE-SU-2014:0818-1 advisory.
Description:	Summary: The remote host is missing an update for the 'openssh' package(s) announced via the SUSE-SU-2014:0818-1 advisory. Vulnerability Insight: This update for OpenSSH fixes the following issues: * Exit sshd normally when port is already in use. (bnc#832628) * Use hardware crypto engines where available. (bnc#826427) * Use correct options for login when it is used. (bnc#833605) * Move FIPS messages to higher debug level. (bnc#862875) * Fix forwarding with IPv6 addresses in DISPLAY. (bnc#847710) * Do not link OpenSSH binaries with LDAP libraries. (bnc#826906) * Parse AcceptEnv properly. (bnc#869101, CVE-2014-2532) * Check SSHFP DNS records even for server certificates. (bnc#870532, CVE-2014-2653) Security Issues references: * CVE-2014-2532 * CVE-2014-2653 Affected Software/OS: 'openssh' package(s) on SUSE Linux Enterprise Desktop 11 SP3, SUSE Linux Enterprise Server 11 SP3. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2532 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 66355 http://www.securityfocus.com/bid/66355 Debian Security Information: DSA-2894 (Google Search) http://www.debian.org/security/2014/dsa-2894 http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html HPdes Security Advisory: HPSBUX03188 http://marc.info/?l=bugtraq&m=141576985122836&w=2 HPdes Security Advisory: SSRT101487 http://www.mandriva.com/security/advisories?name=MDVSA-2014:068 http://www.mandriva.com/security/advisories?name=MDVSA-2015:095 http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2 RedHat Security Advisories: RHSA-2014:1552 http://rhn.redhat.com/errata/RHSA-2014-1552.html http://www.securitytracker.com/id/1029925 http://secunia.com/advisories/57488 http://secunia.com/advisories/57574 http://secunia.com/advisories/59313 http://secunia.com/advisories/59855 http://www.ubuntu.com/usn/USN-2155-1 XForce ISS Database: openssh-cve20142532-sec-bypass(91986) https://exchange.xforce.ibmcloud.com/vulnerabilities/91986 Common Vulnerability Exposure (CVE) ID: CVE-2014-2653 BugTraq ID: 66459 http://www.securityfocus.com/bid/66459 http://openwall.com/lists/oss-security/2014/03/26/7 RedHat Security Advisories: RHSA-2015:0425 http://rhn.redhat.com/errata/RHSA-2015-0425.html http://www.ubuntu.com/usn/USN-2164-1
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.