Test Kennung:	1.3.6.1.4.1.25623.1.0.72034
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Security Advisory MDVSA-2012:048 (mutt)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to mutt announced via advisory MDVSA-2012:048. A vulnerability has been found and corrected in mutt: Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766 (CVE-2011-1429). The updated packages have been patched to correct this issue. Affected: 2010.1, 2011. Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:048 Risk factor : High
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3766 http://marc.info/?l=oss-security&m=125198917018936&w=2 http://www.openwall.com/lists/oss-security/2009/10/26/1 Common Vulnerability Exposure (CVE) ID: CVE-2011-1429 BugTraq ID: 46803 http://www.securityfocus.com/bid/46803 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061353.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061356.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061461.html http://seclists.org/fulldisclosure/2011/Mar/87 http://www.redhat.com/support/errata/RHSA-2011-0959.html http://secunia.com/advisories/44937 http://securityreason.com/securityalert/8143 XForce ISS Database: mutt-smtptls-weak-security(66015) https://exchange.xforce.ibmcloud.com/vulnerabilities/66015
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.