Test Kennung:	1.3.6.1.4.1.25623.1.0.57904
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200610-06 (nss)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200610-06.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200610-06. Vulnerability Insight: NSS fails to properly validate PKCS #1 v1.5 signatures. Solution: All NSS users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-libs/nss-3.11.3' Note: As usual after updating a library, you should run 'revdep-rebuild' (from the app-portage/gentoolkit package) to ensure that all applications linked to it are properly rebuilt. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4339 1000148 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1 1016791 http://securitytracker.com/id?1016791 1017522 http://securitytracker.com/id?1017522 102648 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 102656 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1 102657 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1 102686 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 102696 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1 102722 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 102744 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1 102759 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1 19849 http://www.securityfocus.com/bid/19849 20060901-01-P ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc 20060905 rPSA-2006-0163-1 openssl openssl-scripts http://www.securityfocus.com/archive/1/445231/100/0/threaded 20060912 ERRATA: [ GLSA 200609-05 ] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery http://www.securityfocus.com/archive/1/445822/100/0/threaded 20061108 Multiple Vulnerabilities in OpenSSL Library http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html 20061108 Multiple Vulnerabilities in OpenSSL library http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml 20070110 VMware ESX server security updates http://www.securityfocus.com/archive/1/456546/100/200/threaded 200708 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues http://www.securityfocus.com/archive/1/489739/100/0/threaded 201247 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1 201534 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 21709 http://secunia.com/advisories/21709 21767 http://secunia.com/advisories/21767 21776 http://secunia.com/advisories/21776 21778 http://secunia.com/advisories/21778 21785 http://secunia.com/advisories/21785 21791 http://secunia.com/advisories/21791 21812 http://secunia.com/advisories/21812 21823 http://secunia.com/advisories/21823 21846 http://secunia.com/advisories/21846 21852 http://secunia.com/advisories/21852 21870 http://secunia.com/advisories/21870 21873 http://secunia.com/advisories/21873 21906 http://secunia.com/advisories/21906 21927 http://secunia.com/advisories/21927 21930 http://secunia.com/advisories/21930 21982 http://secunia.com/advisories/21982 22036 http://secunia.com/advisories/22036 22044 http://secunia.com/advisories/22044 22066 http://secunia.com/advisories/22066 22083 http://www.securityfocus.com/bid/22083 22161 http://secunia.com/advisories/22161 22226 http://secunia.com/advisories/22226 22232 http://secunia.com/advisories/22232 22259 http://secunia.com/advisories/22259 22260 http://secunia.com/advisories/22260 22284 http://secunia.com/advisories/22284 22325 http://secunia.com/advisories/22325 22446 http://secunia.com/advisories/22446 22509 http://secunia.com/advisories/22509 22513 http://secunia.com/advisories/22513 22523 http://secunia.com/advisories/22523 22545 http://secunia.com/advisories/22545 22585 http://secunia.com/advisories/22585 22671 http://secunia.com/advisories/22671 22689 http://secunia.com/advisories/22689 22711 http://secunia.com/advisories/22711 22733 http://secunia.com/advisories/22733 22758 http://secunia.com/advisories/22758 22799 http://secunia.com/advisories/22799 22932 http://secunia.com/advisories/22932 22934 http://secunia.com/advisories/22934 22936 http://secunia.com/advisories/22936 22937 http://secunia.com/advisories/22937 22938 http://secunia.com/advisories/22938 22939 http://secunia.com/advisories/22939 22940 http://secunia.com/advisories/22940 22948 http://secunia.com/advisories/22948 22949 http://secunia.com/advisories/22949 23155 http://secunia.com/advisories/23155 23455 http://secunia.com/advisories/23455 23680 http://secunia.com/advisories/23680 23794 http://secunia.com/advisories/23794 23841 http://secunia.com/advisories/23841 23915 http://secunia.com/advisories/23915 24099 http://secunia.com/advisories/24099 24930 http://secunia.com/advisories/24930 24950 http://secunia.com/advisories/24950 25284 http://secunia.com/advisories/25284 25399 http://secunia.com/advisories/25399 25649 http://secunia.com/advisories/25649 26329 http://secunia.com/advisories/26329 26893 http://secunia.com/advisories/26893 28115 http://secunia.com/advisories/28115 28276 http://www.securityfocus.com/bid/28276 28549 http://www.osvdb.org/28549 31492 http://secunia.com/advisories/31492 38567 http://secunia.com/advisories/38567 38568 http://secunia.com/advisories/38568 41818 http://secunia.com/advisories/41818 60799 http://secunia.com/advisories/60799 ADV-2006-3453 http://www.vupen.com/english/advisories/2006/3453 ADV-2006-3566 http://www.vupen.com/english/advisories/2006/3566 ADV-2006-3730 http://www.vupen.com/english/advisories/2006/3730 ADV-2006-3748 http://www.vupen.com/english/advisories/2006/3748 ADV-2006-3793 http://www.vupen.com/english/advisories/2006/3793 ADV-2006-3899 http://www.vupen.com/english/advisories/2006/3899 ADV-2006-3936 http://www.vupen.com/english/advisories/2006/3936 ADV-2006-4205 http://www.vupen.com/english/advisories/2006/4205 ADV-2006-4206 http://www.vupen.com/english/advisories/2006/4206 ADV-2006-4207 http://www.vupen.com/english/advisories/2006/4207 ADV-2006-4216 http://www.vupen.com/english/advisories/2006/4216 ADV-2006-4327 http://www.vupen.com/english/advisories/2006/4327 ADV-2006-4329 http://www.vupen.com/english/advisories/2006/4329 ADV-2006-4366 http://www.vupen.com/english/advisories/2006/4366 ADV-2006-4417 http://www.vupen.com/english/advisories/2006/4417 ADV-2006-4586 http://www.vupen.com/english/advisories/2006/4586 ADV-2006-4744 http://www.vupen.com/english/advisories/2006/4744 ADV-2006-4750 http://www.vupen.com/english/advisories/2006/4750 ADV-2006-5146 http://www.vupen.com/english/advisories/2006/5146 ADV-2007-0254 http://www.vupen.com/english/advisories/2007/0254 ADV-2007-0343 http://www.vupen.com/english/advisories/2007/0343 ADV-2007-1401 http://www.vupen.com/english/advisories/2007/1401 ADV-2007-1815 http://www.vupen.com/english/advisories/2007/1815 ADV-2007-1945 http://www.vupen.com/english/advisories/2007/1945 ADV-2007-2163 http://www.vupen.com/english/advisories/2007/2163 ADV-2007-2315 http://www.vupen.com/english/advisories/2007/2315 ADV-2007-2783 http://www.vupen.com/english/advisories/2007/2783 ADV-2007-4224 http://www.vupen.com/english/advisories/2007/4224 ADV-2008-0905 http://www.vupen.com/english/advisories/2008/0905/references ADV-2010-0366 http://www.vupen.com/english/advisories/2010/0366 APPLE-SA-2006-11-28 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html APPLE-SA-2007-12-14 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html BEA07-169.00 http://dev2dev.bea.com/pub/advisory/238 DSA-1173 http://www.us.debian.org/security/2006/dsa-1173 DSA-1174 http://www.debian.org/security/2006/dsa-1174 FreeBSD-SA-06:19 http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc GLSA-200609-05 http://security.gentoo.org/glsa/glsa-200609-05.xml GLSA-200609-18 http://security.gentoo.org/glsa/glsa-200609-18.xml GLSA-200610-06 http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml GLSA-201408-19 http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml HPSBMA02250 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPSBTU02207 https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HPSBUX02153 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 HPSBUX02165 http://www.securityfocus.com/archive/1/450327/100/0/threaded HPSBUX02186 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 HPSBUX02219 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 JVN#51615542 http://jvn.jp/en/jp/JVN51615542/index.html JVNDB-2012-000079 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html MDKSA-2006:161 http://www.mandriva.com/security/advisories?name=MDKSA-2006:161 MDKSA-2006:177 http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 MDKSA-2006:178 http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 MDKSA-2006:207 http://www.mandriva.com/security/advisories?name=MDKSA-2006:207 OpenPKG-SA-2006.018 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html OpenPKG-SA-2006.029 http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html RHSA-2006:0661 http://www.redhat.com/support/errata/RHSA-2006-0661.html RHSA-2007:0062 http://www.redhat.com/support/errata/RHSA-2007-0062.html RHSA-2007:0072 http://www.redhat.com/support/errata/RHSA-2007-0072.html RHSA-2007:0073 http://www.redhat.com/support/errata/RHSA-2007-0073.html RHSA-2008:0629 http://www.redhat.com/support/errata/RHSA-2008-0629.html SSA:2006-257-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 SSA:2006-310-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955 SSRT061181 SSRT061213 SSRT061239 SSRT061266 SSRT061273 SSRT061275 SSRT071299 SSRT071304 SSRT090208 SUSE-SA:2006:055 http://www.novell.com/linux/security/advisories/2006_55_ssl.html SUSE-SA:2006:061 http://www.novell.com/linux/security/advisories/2006_61_opera.html SUSE-SA:2007:010 http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html SUSE-SR:2006:026 http://www.novell.com/linux/security/advisories/2006_26_sr.html TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html USN-339-1 http://www.ubuntu.com/usn/usn-339-1 VU#845620 http://www.kb.cert.org/vuls/id/845620 [3.9] 20060908 011: SECURITY FIX: September 8, 2006 http://www.openbsd.org/errata.html [bind-announce] 20061103 Internet Systems Consortium Security Advisory. [revised] http://marc.info/?l=bind-announce&m=116253119512445&w=2 [ietf-openpgp] 20060827 Bleichenbacher's RSA signature forgery based on implementation error http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues http://lists.vmware.com/pipermail/security-announce/2008/000008.html http://docs.info.apple.com/article.html?artnum=304829 http://docs.info.apple.com/article.html?artnum=307177 http://openvpn.net/changelog.html http://support.attachmate.com/techdocs/2127.html http://support.attachmate.com/techdocs/2128.html http://support.attachmate.com/techdocs/2137.html http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ http://www.openoffice.org/security/cves/CVE-2006-4339.html http://www.openssl.org/news/secadv_20060905.txt http://www.opera.com/support/search/supsearch.dml?index=845 http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html http://www.serv-u.com/releasenotes/ http://www.sybase.com/detail?id=1047991 http://www.vmware.com/security/advisories/VMSA-2008-0005.html http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html http://www.vmware.com/support/player/doc/releasenotes_player.html http://www.vmware.com/support/player2/doc/releasenotes_player2.html http://www.vmware.com/support/server/doc/releasenotes_server.html http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 https://issues.rpath.com/browse/RPL-1633 https://issues.rpath.com/browse/RPL-616 https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html openssl-rsa-security-bypass(28755) https://exchange.xforce.ibmcloud.com/vulnerabilities/28755 oval:org.mitre.oval:def:11656 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656 Common Vulnerability Exposure (CVE) ID: CVE-2006-4340 1016858 http://securitytracker.com/id?1016858 1016859 http://securitytracker.com/id?1016859 1016860 http://securitytracker.com/id?1016860 102781 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1 20060915 rPSA-2006-0169-1 firefox thunderbird http://www.securityfocus.com/archive/1/446140/100/0/threaded 21903 http://secunia.com/advisories/21903 21915 http://secunia.com/advisories/21915 21916 http://secunia.com/advisories/21916 21939 http://secunia.com/advisories/21939 21940 http://secunia.com/advisories/21940 21949 http://secunia.com/advisories/21949 21950 http://secunia.com/advisories/21950 22001 http://secunia.com/advisories/22001 22025 http://secunia.com/advisories/22025 22055 http://secunia.com/advisories/22055 22056 http://secunia.com/advisories/22056 22074 http://secunia.com/advisories/22074 22088 http://secunia.com/advisories/22088 22195 http://secunia.com/advisories/22195 22210 http://secunia.com/advisories/22210 22247 http://secunia.com/advisories/22247 22274 http://secunia.com/advisories/22274 22299 http://secunia.com/advisories/22299 22342 http://secunia.com/advisories/22342 22422 http://secunia.com/advisories/22422 22849 http://secunia.com/advisories/22849 22992 http://secunia.com/advisories/22992 23883 http://secunia.com/advisories/23883 24711 http://secunia.com/advisories/24711 ADV-2006-3617 http://www.vupen.com/english/advisories/2006/3617 ADV-2006-3622 http://www.vupen.com/english/advisories/2006/3622 ADV-2007-0293 http://www.vupen.com/english/advisories/2007/0293 ADV-2007-1198 http://www.vupen.com/english/advisories/2007/1198 ADV-2008-0083 http://www.vupen.com/english/advisories/2008/0083 DSA-1191 http://www.us.debian.org/security/2006/dsa-1191 DSA-1192 http://www.debian.org/security/2006/dsa-1192 DSA-1210 http://www.debian.org/security/2006/dsa-1210 GLSA-200609-19 http://security.gentoo.org/glsa/glsa-200609-19.xml GLSA-200610-01 http://security.gentoo.org/glsa/glsa-200610-01.xml MDKSA-2006:168 http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 MDKSA-2006:169 http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 RHSA-2006:0675 http://www.redhat.com/support/errata/RHSA-2006-0675.html RHSA-2006:0676 http://www.redhat.com/support/errata/RHSA-2006-0676.html RHSA-2006:0677 http://www.redhat.com/support/errata/RHSA-2006-0677.html SUSE-SA:2006:054 http://www.novell.com/linux/security/advisories/2006_54_mozilla.html TA06-312A http://www.us-cert.gov/cas/techalerts/TA06-312A.html USN-350-1 http://www.ubuntu.com/usn/usn-350-1 USN-351-1 http://www.ubuntu.com/usn/usn-351-1 USN-352-1 http://www.ubuntu.com/usn/usn-352-1 USN-354-1 http://www.ubuntu.com/usn/usn-354-1 USN-361-1 http://www.ubuntu.com/usn/usn-361-1 http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm http://www.mozilla.org/security/announce/2006/mfsa2006-60.html http://www.mozilla.org/security/announce/2006/mfsa2006-66.html https://issues.rpath.com/browse/RPL-640 mozilla-nss-security-bypass(30098) https://exchange.xforce.ibmcloud.com/vulnerabilities/30098 oval:org.mitre.oval:def:11007 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.