ID de Prueba:	1.3.6.1.4.1.25623.1.0.56543
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200603-15 (crypt-cbc)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200603-15.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200603-15. Vulnerability Insight: Crypt::CBC uses an insecure initialization vector, potentially resulting in a weaker encryption. Solution: All Crypt::CBC users should upgrade to the latest available version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-perl/crypt-cbc-2.17' CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0898 BugTraq ID: 16802 http://www.securityfocus.com/bid/16802 Bugtraq: 20060223 Vulnerability in Crypt::CBC Perl module, versions <= 2.16 (Google Search) http://www.securityfocus.com/archive/1/425966/100/0/threaded Debian Security Information: DSA-996 (Google Search) http://www.debian.org/security/2006/dsa-996 http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml http://www.redhat.com/support/errata/RHSA-2008-0261.html RedHat Security Advisories: RHSA-2008:0630 http://rhn.redhat.com/errata/RHSA-2008-0630.html http://secunia.com/advisories/18755 http://secunia.com/advisories/19187 http://secunia.com/advisories/19303 http://secunia.com/advisories/20899 http://secunia.com/advisories/31493 http://securityreason.com/securityalert/488 SuSE Security Announcement: SUSE-SR:2006:015 (Google Search) http://www.novell.com/linux/security/advisories/2006_38_security.html XForce ISS Database: crypt-cbc-header-weak-encryption(24954) https://exchange.xforce.ibmcloud.com/vulnerabilities/24954
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.