ID de Prueba:	1.3.6.1.4.1.25623.1.0.71837
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: inn
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: inn CVE-2011-0411 The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a 'plaintext command injection' attack. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3523 http://www.mandriva.com/security/advisories?name=MDVSA-2012:156 http://secunia.com/advisories/50661 SuSE Security Announcement: openSUSE-SU-2012:1171 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-09/msg00058.html Common Vulnerability Exposure (CVE) ID: CVE-2011-0411 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html BugTraq ID: 46767 http://www.securityfocus.com/bid/46767 CERT/CC vulnerability note: VU#555316 http://www.kb.cert.org/vuls/id/555316 Debian Security Information: DSA-2233 (Google Search) http://www.debian.org/security/2011/dsa-2233 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056560.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056559.html http://security.gentoo.org/glsa/glsa-201206-33.xml http://www.openwall.com/lists/oss-security/2021/08/10/2 http://www.osvdb.org/71021 http://www.redhat.com/support/errata/RHSA-2011-0422.html http://www.redhat.com/support/errata/RHSA-2011-0423.html http://securitytracker.com/id?1025179 http://secunia.com/advisories/43646 http://secunia.com/advisories/43874 SuSE Security Announcement: SUSE-SR:2011:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html http://www.vupen.com/english/advisories/2011/0611 http://www.vupen.com/english/advisories/2011/0752 http://www.vupen.com/english/advisories/2011/0891 XForce ISS Database: multiple-starttls-command-execution(65932) https://exchange.xforce.ibmcloud.com/vulnerabilities/65932
Copyright	Copyright (C) 2012 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.