ID de Prueba:	1.3.6.1.4.1.25623.1.0.130089
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0289)
Resumen:	The remote host is missing an update for the 'stunnel' package(s) announced via the MGASA-2015-0289 advisory.
Descripción:	Summary: The remote host is missing an update for the 'stunnel' package(s) announced via the MGASA-2015-0289 advisory. Vulnerability Insight: Johan Olofsson discovered an authentication bypass vulnerability in Stunnel, a program designed to work as an universal SSL tunnel for network daemons. When Stunnel in server mode is used with the redirect option and certificate-based authentication is enabled with 'verify = 2' or higher, then only the initial connection is redirected to the hosts specified with 'redirect'. This allows a remote attacker to bypass authentication (CVE-2015-3644). Affected Software/OS: 'stunnel' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3644 BugTraq ID: 74659 http://www.securityfocus.com/bid/74659 Debian Security Information: DSA-3299 (Google Search) http://www.debian.org/security/2015/dsa-3299 http://www.securitytracker.com/id/1032324
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.