ID de Prueba:	1.3.6.1.4.1.25623.1.0.54511
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200312-05 (GnuPG)
Resumen:	The remote host is missing updates announced in; advisory GLSA 200312-05.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200312-05. Vulnerability Insight: A bug in GnuPG allows ElGamal signing keys to be compromised, and a format string bug in the gpgkeys_hkp utility may allow arbitrary code execution. Solution: All users who have created ElGamal signing keys should immediately revoke them. In addition, all Gentoo Linux machines with gnupg installed should be updated to use gnupg-1.2.3-r5 or higher: # emerge sync # emerge -pv '>=app-crypt/gnupg-1.2.3-r5' # emerge '>=app-crypt/gnupg-1.2.3-r5' # emerge clean CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0971 BugTraq ID: 9115 http://www.securityfocus.com/bid/9115 Bugtraq: 20031127 GnuPG's ElGamal signing keys compromised (Google Search) http://marc.info/?l=bugtraq&m=106995769213221&w=2 CERT/CC vulnerability note: VU#940388 http://www.kb.cert.org/vuls/id/940388 Conectiva Linux advisory: CLA-2003:798 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000798 Debian Security Information: DSA-429 (Google Search) http://www.debian.org/security/2004/dsa-429 http://www.mandriva.com/security/advisories?name=MDKSA-2003:109 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10982 http://www.redhat.com/support/errata/RHSA-2003-390.html http://www.redhat.com/support/errata/RHSA-2003-395.html http://secunia.com/advisories/10304 http://secunia.com/advisories/10349 http://secunia.com/advisories/10399 http://secunia.com/advisories/10400 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc SuSE Security Announcement: SuSE-SA:2003:048 (Google Search) http://www.novell.com/linux/security/advisories/2003_048_gpg.html
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.