Test ID:	1.3.6.1.4.1.25623.1.0.53942
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2004-077-01)
Summary:	The remote host is missing an update for the 'OpenSSL' package(s) announced via the SSA:2004-077-01 advisory.
Description:	Summary: The remote host is missing an update for the 'OpenSSL' package(s) announced via the SSA:2004-077-01 advisory. Vulnerability Insight: Upgraded OpenSSL packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two potential denial-of-service issues in earlier versions of OpenSSL. We recommend sites that use OpenSSL upgrade to the fixed packages right away. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [links moved to references] Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Wed Mar 17 14:41:42 PST 2004 patches/packages/openssl-0.9.7d-i486-1.tgz: Upgraded to openssl-0.9.7d. patches/packages/openssl-solibs-0.9.7d-i486-1.tgz: Upgraded to openssl-0.9.7d. This fixes two potential denial-of-service issues in earlier versions of OpenSSL. For more details, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'OpenSSL' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0079 http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html BugTraq ID: 9899 http://www.securityfocus.com/bid/9899 Bugtraq: 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004] (Google Search) http://marc.info/?l=bugtraq&m=107953412903636&w=2 Cert/CC Advisory: TA04-078A http://www.us-cert.gov/cas/techalerts/TA04-078A.html CERT/CC vulnerability note: VU#288574 http://www.kb.cert.org/vuls/id/288574 Computer Incident Advisory Center Bulletin: O-101 http://www.ciac.org/ciac/bulletins/o-101.shtml Cisco Security Advisory: 20040317 Cisco OpenSSL Implementation Vulnerability http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml Conectiva Linux advisory: CLA-2004:834 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834 Debian Security Information: DSA-465 (Google Search) http://www.debian.org/security/2004/dsa-465 En Garde Linux Advisory: ESA-20040317-003 http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html http://fedoranews.org/updates/FEDORA-2004-095.shtml http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html FreeBSD Security Advisory: FreeBSD-SA-04:05 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc http://security.gentoo.org/glsa/glsa-200403-03.xml HPdes Security Advisory: SSRT4717 http://marc.info/?l=bugtraq&m=108403806509920&w=2 http://www.mandriva.com/security/advisories?name=MDKSA-2004:023 http://www.uniras.gov.uk/vuls/2004/224012/index.htm NETBSD Security Advisory: NetBSD-SA2004-005 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779 http://www.redhat.com/support/errata/RHSA-2004-120.html http://www.redhat.com/support/errata/RHSA-2004-121.html http://www.redhat.com/support/errata/RHSA-2004-139.html http://www.redhat.com/support/errata/RHSA-2005-829.html http://www.redhat.com/support/errata/RHSA-2005-830.html SCO Security Bulletin: SCOSA-2004.10 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt http://secunia.com/advisories/11139 http://secunia.com/advisories/17381 http://secunia.com/advisories/17398 http://secunia.com/advisories/17401 http://secunia.com/advisories/18247 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524 SuSE Security Announcement: SuSE-SA:2004:007 (Google Search) http://www.novell.com/linux/security/advisories/2004_07_openssl.html http://www.trustix.org/errata/2004/0012 XForce ISS Database: openssl-dochangecipherspec-dos(15505) https://exchange.xforce.ibmcloud.com/vulnerabilities/15505 Common Vulnerability Exposure (CVE) ID: CVE-2004-0112 CERT/CC vulnerability note: VU#484726 http://www.kb.cert.org/vuls/id/484726 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580 XForce ISS Database: openssl-kerberos-ciphersuites-dos(15508) https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.