Test Kennung:	1.3.6.1.4.1.25623.1.0.71534
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: py-pycrypto
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: py-pycrypto CVE-2012-2417 PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2417 BugTraq ID: 53687 http://www.securityfocus.com/bid/53687 Debian Security Information: DSA-2502 (Google Search) http://www.debian.org/security/2012/dsa-2502 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:117 https://bugs.launchpad.net/pycrypto/+bug/985164 https://github.com/Legrandin/pycrypto/commit/9f912f13df99ad3421eff360d6a62d7dbec755c2 http://www.openwall.com/lists/oss-security/2012/05/25/1 http://www.osvdb.org/82279 http://secunia.com/advisories/49263 SuSE Security Announcement: openSUSE-SU-2012:0830 (Google Search) https://hermes.opensuse.org/messages/15083589 XForce ISS Database: pycrypto-keys-weak-security(75871) https://exchange.xforce.ibmcloud.com/vulnerabilities/75871
Copyright	Copyright (C) 2012 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.