ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2015.0064
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0064)
Resumen:	The remote host is missing an update for the 'owasp-esapi-java' package(s) announced via the MGASA-2015-0064 advisory.
Descripción:	Summary: The remote host is missing an update for the 'owasp-esapi-java' package(s) announced via the MGASA-2015-0064 advisory. Vulnerability Insight: Updated owasp-esapi-java packages fix security vulnerability: The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protection mechanisms via an attack against authenticity in the default configuration, involving a null MAC and a zero MAC length (CVE-2013-5679). Affected Software/OS: 'owasp-esapi-java' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 2.6 CVSS Vector: AV:L/AC:H/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5679 BugTraq ID: 62415 http://www.securityfocus.com/bid/62415 http://lists.owasp.org/pipermail/esapi-dev/2013-August/002285.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.