ID de Prueba:	1.3.6.1.4.1.25623.1.0.62958
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200812-09 (opensc)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200812-09.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200812-09. Vulnerability Insight: Smart cards formatted using OpenSC do not sufficiently protect the PIN, allowing attackers to reset it. Solution: All OpenSC users should upgrade to the latest version, and then check and update their smart cards: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-libs/opensc-0.11.6' # pkcs15-tool --test-update # pkcs15-tool --test-update --update CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:C/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2235 BugTraq ID: 30473 http://www.securityfocus.com/bid/30473 Debian Security Information: DSA-1627 (Google Search) https://www.debian.org/security/2008/dsa-1627 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html http://security.gentoo.org/glsa/glsa-200812-09.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:183 http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html http://secunia.com/advisories/31330 http://secunia.com/advisories/31360 http://secunia.com/advisories/32099 http://secunia.com/advisories/33115 http://secunia.com/advisories/34362 SuSE Security Announcement: SUSE-SR:2008:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html XForce ISS Database: opensc-smartcard-cryptotoken-weak-security(44140) https://exchange.xforce.ibmcloud.com/vulnerabilities/44140
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.