Test Kennung:	1.3.6.1.4.1.25623.1.0.55184
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-86 (nss_ldap)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to nss_ldap announced via advisory TLSA-2005-86. The nss_ldap is a set of C library extensions which allows X.500 and LDAP directory servers to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services and shadow passwords (instead of or in addition to using flat files or NIS). The pam_ldap and nss_ldap would not use TLS for referred connections if they are referred to a master after connecting to a slave. The pam_ldap and nss_ldap may cause a password to be sent in cleartext and allows remote attackers to sniff the password. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2005-86 Risk factor : Medium CVSS Score: 5.0
Querverweis:	BugTraq ID: 14126 BugTraq ID: 14125 Common Vulnerability Exposure (CVE) ID: CVE-2005-2069 14125 http://www.securityfocus.com/bid/14125 14126 http://www.securityfocus.com/bid/14126 17233 http://secunia.com/advisories/17233 17692 http://www.osvdb.org/17692 17845 http://secunia.com/advisories/17845 20050704 pam_ldap/nss_ldap password leak in a master+slave+start_tls LDAP setup http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0060.html 21520 http://secunia.com/advisories/21520 GLSA-2005-07-13 http://www.gentoo.org/security/en/glsa/glsa-200507-13.xml MDKSA-2005:121 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:121 RHSA-2005:751 http://www.redhat.com/support/errata/RHSA-2005-751.html RHSA-2005:767 http://www.redhat.com/support/errata/RHSA-2005-767.html USN-152-1 http://www.ubuntu.com/usn/usn-152-1 http://bugs.gentoo.org/show_bug.cgi?id=96767 http://bugzilla.padl.com/show_bug.cgi?id=210 http://bugzilla.padl.com/show_bug.cgi?id=211 http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm http://www.openldap.org/its/index.cgi/Incoming?id=3791 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161990 ldap-tls-information-disclosure(21245) https://exchange.xforce.ibmcloud.com/vulnerabilities/21245 oval:org.mitre.oval:def:9445 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9445
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.