Test ID:	1.3.6.1.4.1.25623.1.0.120703
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2016-714)
Summary:	The remote host is missing an update for the 'mod24_nss' package(s) announced via the ALAS-2016-714 advisory.
Description:	Summary: The remote host is missing an update for the 'mod24_nss' package(s) announced via the ALAS-2016-714 advisory. Vulnerability Insight: It was reported that +CIPHER operator in OpenSSL changes the order of a cipher. Instead of returning an error (as NSS does not support cipher ordering), it returned the result of processing up to that point, which could result in requested ciphers not being enabled. Affected Software/OS: 'mod24_nss' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3099 FEDORA-2016-1eaaf1ed0f http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.html FEDORA-2016-85e9f2e3cd http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.html FEDORA-2016-8b28358b72 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html RHSA-2016:2602 http://rhn.redhat.com/errata/RHSA-2016-2602.html https://bugzilla.redhat.com/show_bug.cgi?id=1319052
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.