Test Kennung:	1.3.6.1.4.1.25623.1.0.51110
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2004:308
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2004:308. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will attempt to verify that host certificate, but will not abort the key exchange if verification fails. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0607 to this issue. Users of ipsec-tools should upgrade to this updated package which contains a backported security patch and is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-308.html http://marc.theaimsgroup.com/?l=bugtraq&m=108726102304507 Risk factor : Critical CVSS Score: 10.0
Querverweis:	BugTraq ID: 10546 Common Vulnerability Exposure (CVE) ID: CVE-2004-0607 http://www.securityfocus.com/bid/10546 Bugtraq: 20040614 authentication bug in KAME's racoon (Google Search) http://marc.info/?l=bugtraq&m=108726102304507&w=2 Bugtraq: 20040615 Re: authentication bug in KAME's racoon (Google Search) http://marc.info/?l=bugtraq&m=108731967126033&w=2 http://security.gentoo.org/glsa/glsa-200406-17.xml http://www.osvdb.org/7113 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163 http://www.redhat.com/support/errata/RHSA-2004-308.html SCO Security Bulletin: SCOSA-2005.10 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt http://securitytracker.com/id?1010495 http://secunia.com/advisories/11863 http://secunia.com/advisories/11877 XForce ISS Database: racoon-eaycheckx509cert-auth-bypass(16414) https://exchange.xforce.ibmcloud.com/vulnerabilities/16414
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.