Test ID:	1.3.6.1.4.1.25623.1.0.123846
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2012-1151)
Summary:	The remote host is missing an update for the 'openldap' package(s) announced via the ELSA-2012-1151 advisory.
Description:	Summary: The remote host is missing an update for the 'openldap' package(s) announced via the ELSA-2012-1151 advisory. Vulnerability Insight: [2.4.23-26.2] - CVE-2012-2668 (#825875) cipher suite selection by name can be ignored default cipher suite is always selected [2.4.23-26.1] - fix: smbk5pwd module computes invalid LM hashes (#820278) Affected Software/OS: 'openldap' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2668 1027127 http://www.securitytracker.com/id?1027127 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra https://seclists.org/bugtraq/2019/Dec/23 20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra http://seclists.org/fulldisclosure/2019/Dec/26 53823 http://www.securityfocus.com/bid/53823 GLSA-201406-36 http://security.gentoo.org/glsa/glsa-201406-36.xml RHSA-2012:1151 http://rhn.redhat.com/errata/RHSA-2012-1151.html [oss-security] 20120605 CVE request: openldap does not honor TLSCipherSuite configuration option http://www.openwall.com/lists/oss-security/2012/06/05/4 [oss-security] 20120605 Re: CVE request: openldap does not honor TLSCipherSuite configuration option http://www.openwall.com/lists/oss-security/2012/06/06/1 [oss-security] 20120606 Re: CVE request: openldap does not honor TLSCipherSuite configuration option http://www.openwall.com/lists/oss-security/2012/06/06/2 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309 http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=2c2bb2e http://www.openldap.org/its/index.cgi?findid=7285 https://bugzilla.redhat.com/show_bug.cgi?id=825875 https://support.apple.com/kb/HT210788 openldap-nss-weak-security(76099) https://exchange.xforce.ibmcloud.com/vulnerabilities/76099
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.