ID de Prueba:	1.3.6.1.4.1.25623.1.0.70615
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: kdelibs
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: kdelibs rekonq CVE-2011-3365 The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text. CVE-2011-3366 Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3365 MDVSA-2011:162 http://www.mandriva.com/security/advisories?name=MDVSA-2011:162 RHSA-2011:1364 http://www.redhat.com/support/errata/RHSA-2011-1364.html RHSA-2011:1385 http://www.redhat.com/support/errata/RHSA-2011-1385.html http://www.kde.org/info/security/advisory-20111003-1.txt https://bugzilla.redhat.com/show_bug.cgi?id=743054 Common Vulnerability Exposure (CVE) ID: CVE-2011-3366 Bugtraq: 20111007 Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM (Google Search) http://www.securityfocus.com/archive/1/520041
Copyright	Copyright (C) 2012 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.