ID de Prueba:	1.3.6.1.4.1.25623.1.0.64670
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2009:1232
Resumen:	The remote host is missing updates announced in;advisory RHSA-2009:1232.;;The GnuTLS library provides support for cryptographic algorithms and for;protocols such as Transport Layer Security (TLS).;;A flaw was discovered in the way GnuTLS handles NULL characters in certain;fields of X.509 certificates. If an attacker is able to get a;carefully-crafted certificate signed by a Certificate Authority trusted by;an application using GnuTLS, the attacker could use the certificate during;a man-in-the-middle attack and potentially confuse the application into;accepting it by mistake. (CVE-2009-2730);;Users of GnuTLS are advised to upgrade to these updated packages, which;contain a backported patch that corrects this issue.
Descripción:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1232. The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). A flaw was discovered in the way GnuTLS handles NULL characters in certain fields of X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a Certificate Authority trusted by an application using GnuTLS, the attacker could use the certificate during a man-in-the-middle attack and potentially confuse the application into accepting it by mistake. (CVE-2009-2730) Users of GnuTLS are advised to upgrade to these updated packages, which contain a backported patch that corrects this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2730 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded http://www.openwall.com/lists/oss-security/2009/08/14/6 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10778 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409 http://www.redhat.com/support/errata/RHSA-2009-1232.html RedHat Security Advisories: RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://www.securitytracker.com/id?1022777 http://secunia.com/advisories/36266 http://secunia.com/advisories/36496 SuSE Security Announcement: SUSE-SR:2009:015 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html XForce ISS Database: gnutls-cn-san-security-bypass(52404) https://exchange.xforce.ibmcloud.com/vulnerabilities/52404
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.