Test Kennung:	1.3.6.1.4.1.25623.1.0.60319
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2008:042 (qt4)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to qt4 announced via advisory MDVSA-2008:042. A potential vulnerability was discovered in Qt4 version 4.3.0 through 4.3.2 which may cause a certificate verification in SSL connections not to be performed. As a result, code that uses QSslSocket could be tricked into thinking that the certificate was verified correctly when it actually failed in one or more criteria. The updated packages have been patched to correct this issue. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:042 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 Risk factor : Medium CVSS Score: 4.3
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5965 27112 http://www.securityfocus.com/bid/27112 28228 http://secunia.com/advisories/28228 28321 http://secunia.com/advisories/28321 28636 http://secunia.com/advisories/28636 28999 http://secunia.com/advisories/28999 ADV-2008-0018 http://www.vupen.com/english/advisories/2008/0018 FEDORA-2007-4285 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html FEDORA-2007-4354 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html MDVSA-2008:042 http://www.mandriva.com/security/advisories?name=MDVSA-2008:042 SUSE-SR:2008:002 http://www.novell.com/linux/security/advisories/suse_security_summary_report.html USN-579-1 http://www.ubuntu.com/usn/usn-579-1 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 https://bugzilla.redhat.com/show_bug.cgi?id=427232
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.