Test ID:	1.3.6.1.4.1.25623.1.0.120564
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2011-18)
Summary:	The remote host is missing an update for the 'openswan' package(s) announced via the ALAS-2011-18 advisory.
Description:	Summary: The remote host is missing an update for the 'openswan' package(s) announced via the ALAS-2011-18 advisory. Vulnerability Insight: A use-after-free flaw was found in the way Openswan's pluto IKE daemon used cryptographic helpers. A remote, authenticated attacker could send a specially-crafted IKE packet that would crash the pluto daemon. This issue only affected SMP (symmetric multiprocessing) systems that have the cryptographic helpers enabled. Affected Software/OS: 'openswan' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4073 BugTraq ID: 50440 http://www.securityfocus.com/bid/50440 Debian Security Information: DSA-2374 (Google Search) http://www.debian.org/security/2011/dsa-2374 http://www.redhat.com/support/errata/RHSA-2011-1422.html http://www.securitytracker.com/id?1026268 http://secunia.com/advisories/46678 http://secunia.com/advisories/46681 http://secunia.com/advisories/47342
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.