Test Kennung:	1.3.6.1.4.1.25623.1.0.70615
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: kdelibs
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: kdelibs rekonq CVE-2011-3365 The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text. CVE-2011-3366 Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3365 MDVSA-2011:162 http://www.mandriva.com/security/advisories?name=MDVSA-2011:162 RHSA-2011:1364 http://www.redhat.com/support/errata/RHSA-2011-1364.html RHSA-2011:1385 http://www.redhat.com/support/errata/RHSA-2011-1385.html http://www.kde.org/info/security/advisory-20111003-1.txt https://bugzilla.redhat.com/show_bug.cgi?id=743054 Common Vulnerability Exposure (CVE) ID: CVE-2011-3366 Bugtraq: 20111007 Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM (Google Search) http://www.securityfocus.com/archive/1/520041
Copyright	Copyright (C) 2012 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.