ID de Prueba:	1.3.6.1.4.1.25623.1.0.882978
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for python-paramiko CESA-2018:3347 centos7
Resumen:	The remote host is missing an update for the 'python-paramiko'; package(s) announced via the CESA-2018:3347 advisory.
Descripción:	Summary: The remote host is missing an update for the 'python-paramiko' package(s) announced via the CESA-2018:3347 advisory. Vulnerability Insight: The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es): * python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: python-paramiko on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000805 https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html RedHat Security Advisories: RHBA-2018:3497 https://access.redhat.com/errata/RHBA-2018:3497 RedHat Security Advisories: RHSA-2018:3347 https://access.redhat.com/errata/RHSA-2018:3347 RedHat Security Advisories: RHSA-2018:3406 https://access.redhat.com/errata/RHSA-2018:3406 RedHat Security Advisories: RHSA-2018:3505 https://access.redhat.com/errata/RHSA-2018:3505 https://usn.ubuntu.com/3796-1/ https://usn.ubuntu.com/3796-2/ https://usn.ubuntu.com/3796-3/
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.