ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2019.0043
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2019-0043)
Resumen:	The remote host is missing an update for the 'libssh' package(s) announced via the MGASA-2019-0043 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libssh' package(s) announced via the MGASA-2019-0043 advisory. Vulnerability Insight: libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2_MSG_USERAUTH_SUCCESS message in place of the SSH2_MSG_USERAUTH_REQUEST message which the server would expect to initiate authentication, the attacker could successfully authentciate without any credentials (CVE-2018-10933). Affected Software/OS: 'libssh' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10933 BugTraq ID: 105677 http://www.securityfocus.com/bid/105677 Debian Security Information: DSA-4322 (Google Search) https://www.debian.org/security/2018/dsa-4322 https://www.exploit-db.com/exploits/45638/ https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html https://usn.ubuntu.com/3795-1/ https://usn.ubuntu.com/3795-2/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.