Test Kennung:	1.3.6.1.4.1.25623.1.0.63767
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2009:089 (opensc)
Zusammenfassung:	The remote host is missing an update to opensc;announced via advisory MDVSA-2009:089.
Beschreibung:	Summary: The remote host is missing an update to opensc announced via advisory MDVSA-2009:089. Vulnerability Insight: OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program. The updated packages fix the issue. Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0368 BugTraq ID: 33922 http://www.securityfocus.com/bid/33922 Debian Security Information: DSA-1734 (Google Search) http://www.debian.org/security/2009/dsa-1734 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html http://security.gentoo.org/glsa/glsa-200908-01.xml http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html http://openwall.com/lists/oss-security/2009/02/26/1 http://secunia.com/advisories/34052 http://secunia.com/advisories/34120 http://secunia.com/advisories/34362 http://secunia.com/advisories/34377 http://secunia.com/advisories/35065 http://secunia.com/advisories/36074 SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html XForce ISS Database: opensc-pkcs-unauth-access(48958) https://exchange.xforce.ibmcloud.com/vulnerabilities/48958
Copyright	Copyright (C) 2009 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.