Test Kennung:	1.3.6.1.4.1.25623.1.0.54511
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200312-05 (GnuPG)
Zusammenfassung:	The remote host is missing updates announced in; advisory GLSA 200312-05.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200312-05. Vulnerability Insight: A bug in GnuPG allows ElGamal signing keys to be compromised, and a format string bug in the gpgkeys_hkp utility may allow arbitrary code execution. Solution: All users who have created ElGamal signing keys should immediately revoke them. In addition, all Gentoo Linux machines with gnupg installed should be updated to use gnupg-1.2.3-r5 or higher: # emerge sync # emerge -pv '>=app-crypt/gnupg-1.2.3-r5' # emerge '>=app-crypt/gnupg-1.2.3-r5' # emerge clean CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0971 BugTraq ID: 9115 http://www.securityfocus.com/bid/9115 Bugtraq: 20031127 GnuPG's ElGamal signing keys compromised (Google Search) http://marc.info/?l=bugtraq&m=106995769213221&w=2 CERT/CC vulnerability note: VU#940388 http://www.kb.cert.org/vuls/id/940388 Conectiva Linux advisory: CLA-2003:798 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000798 Debian Security Information: DSA-429 (Google Search) http://www.debian.org/security/2004/dsa-429 http://www.mandriva.com/security/advisories?name=MDKSA-2003:109 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10982 http://www.redhat.com/support/errata/RHSA-2003-390.html http://www.redhat.com/support/errata/RHSA-2003-395.html http://secunia.com/advisories/10304 http://secunia.com/advisories/10349 http://secunia.com/advisories/10399 http://secunia.com/advisories/10400 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc SuSE Security Announcement: SuSE-SA:2003:048 (Google Search) http://www.novell.com/linux/security/advisories/2003_048_gpg.html
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.