Test ID:	1.3.6.1.4.1.25623.1.0.105248
Category:	General
Title:	Univention Corporate Server 4.0 erratum 137
Summary:	The remote host is missing an update for gnupg (erratum 137)
Description:	Summary: The remote host is missing an update for gnupg (erratum 137) Vulnerability Insight: Multiple security issues have been found in GnuPG: * use after free when using non-standard keyring (CVE-2015-1606) * Side-channel attack on El-Gamal keys (CVE-2014-3591) * Side-channel attack in the mpi_pow() function (CVE-2015-0837) Affected Software/OS: Univention Corporate Server 4.0 erratum < 137 Solution: Apply the missing patch(es). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1606 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=f0f71a721ccd7ab9e40b8b6b028b59632c0cc648 http://www.debian.org/security/2015/dsa-3184 http://www.openwall.com/lists/oss-security/2015/02/13/14 http://www.openwall.com/lists/oss-security/2015/02/14/6 http://www.securitytracker.com/id/1031876 https://blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html Common Vulnerability Exposure (CVE) ID: CVE-2014-3591 http://www.cs.tau.ac.il/~tromer/radioexp/ http://www.debian.org/security/2015/dsa-3185 https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html Common Vulnerability Exposure (CVE) ID: CVE-2015-0837 https://ieeexplore.ieee.org/document/7163050
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.