Test ID:	1.3.6.1.4.1.25623.1.0.831762
Category:	Mandrake Local Security Checks
Title:	Mandriva Update for rootcerts MDVSA-2013:003 (rootcerts)
Summary:	The remote host is missing an update for the 'rootcerts'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'rootcerts' package(s) announced via the referenced advisory. Vulnerability Insight: Google reported to Mozilla that TURKTRUST, a certificate authority in Mozillas root program, had mis-issued two intermediate certificates to customers. The issue was not specific to Firefox but there was evidence that one of the certificates was used for man-in-the-middle (MITM) traffic management of domain names that the customer did not legitimately own or control. This issue was resolved by revoking the trust for these specific mis-issued certificates (CVE-2013-0743). The rootcerts package has been upgraded to address this flaw and the Mozilla NSS package has been rebuilt to pickup the changes. Affected Software/OS: rootcerts on Mandriva Linux 2011.0 Solution: Please Install the Updated Packages. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.