ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2013.0264
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2013-0264)
Resumen:	The remote host is missing an update for the 'php, php-apc, php-gd-bundled' package(s) announced via the MGASA-2013-0264 advisory.
Descripción:	Summary: The remote host is missing an update for the 'php, php-apc, php-gd-bundled' package(s) announced via the MGASA-2013-0264 advisory. Vulnerability Insight: Updated php packages fix security vulnerability: The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority (CVE-2013-4248). Additionally it prevents php-gd and php-gd-bundled packages being installed at the same time, which causes errors. Affected Software/OS: 'php, php-apc, php-gd-bundled' package(s) on Mageia 2, Mageia 3. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4248 BugTraq ID: 61776 http://www.securityfocus.com/bid/61776 Debian Security Information: DSA-2742 (Google Search) http://www.debian.org/security/2013/dsa-2742 HPdes Security Advisory: HPSBUX03150 http://marc.info/?l=bugtraq&m=141390017113542&w=2 RedHat Security Advisories: RHSA-2013:1307 http://rhn.redhat.com/errata/RHSA-2013-1307.html RedHat Security Advisories: RHSA-2013:1615 http://rhn.redhat.com/errata/RHSA-2013-1615.html http://www.securitytracker.com/id/1028924 http://secunia.com/advisories/54478 http://secunia.com/advisories/54657 http://secunia.com/advisories/55078 http://secunia.com/advisories/59652 SuSE Security Announcement: openSUSE-SU-2013:1963 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html SuSE Security Announcement: openSUSE-SU-2013:1964 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html http://www.ubuntu.com/usn/USN-1937-1
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.