ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0535
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0535)
Resumen:	The remote host is missing an update for the 'pwgen' package(s) announced via the MGASA-2014-0535 advisory.
Descripción:	Summary: The remote host is missing an update for the 'pwgen' package(s) announced via the MGASA-2014-0535 advisory. Vulnerability Insight: Updated pwgen package fixes security vulnerabilities: Pwgen was found to generate weak non-tty passwords by default, which could be brute-forced with a commendable success rate, which could raise security concerns (CVE-2013-4440). Pwgen was found to silently falling back to use standard pseudo generated numbers on the systems that heavily use entropy. Systems, such as those with a lot of daemons providing encryption services, the entropy was found to be exhausted, which forces pwgen to fall back to use standard pseudo generated numbers (CVE-2013-4442). Affected Software/OS: 'pwgen' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4440 FEDORA-2014-16368 http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146015.html FEDORA-2014-16406 http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146237.html FEDORA-2014-16473 http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146285.html MDVSA-2015:008 http://www.mandriva.com/security/advisories?name=MDVSA-2015:008 [oss-security] 20140606 Re: CVE Request: pwgen http://www.openwall.com/lists/oss-security/2013/06/06/1 [oss-security] 20141015 Re: RESEND: CVE Request: pwgen http://www.openwall.com/lists/oss-security/2013/10/16/15 http://advisories.mageia.org/MGASA-2014-0535.html http://sourceforge.net/p/pwgen/code/ci/00118ccac4656adb028504639b313d7b09e62b79/ Common Vulnerability Exposure (CVE) ID: CVE-2013-4442 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672241
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.