Test ID:	1.3.6.1.4.1.25623.1.0.51419
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2003:640
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLA-2003:640. Virtual Network Computing (VNC) is a tool that provides remote display viewing/controlling. This update fixes two vulnerabilities found in VNC that affect the versions distributed with Conectiva Linux 7.0 and 8: - Weak challenge number generation[1] VNC uses a challenge-response schema for authentication, but it uses the same challenge for multiple connections that are done in an interval of one second. An attacker can exploit this vulnerability by sniffing the connection and using the same challenge/response of a valid conection to gain access without having a valid account in the vnc server. This vulnerability was fixed in TightVNC 1.2.6. The Common Vulnerabilities and Exposures (CVE) project has assigned the name CVE-2002-1336 to this issue[2]. - Weak Xcookie generation When the VNC server acts as an XServer, it generates a MIT-MAGIC-COOKIE[4] to authenticate users. VNC versions up to 3.3.3r2-21 generate such a cookie in an unsafe manner (not randomly enough), allowing attackers to more easily guess it. A remote attacker can access the vnc server without having permission to do so if it knows the cookie value. The Common Vulnerabilities and Exposures (CVE) project has assigned the name CVE-2002-1511 to this issue[3]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://marc.theaimsgroup.com/?l=bugtraq&m=102753170201524 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1336 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1511 http://www-ugrad.cs.colorado.edu/udp/xauth.html http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:640 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1336 BugTraq ID: 5296 http://www.securityfocus.com/bid/5296 Bugtraq: 20020724 VNC authentication weakness (Google Search) http://marc.info/?l=bugtraq&m=102753170201524&w=2 Bugtraq: 20020726 RE: VNC authentication weakness (Google Search) http://marc.info/?l=bugtraq&m=102769183913594&w=2 Conectiva Linux advisory: CLA-2003:640 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022 http://www.redhat.com/support/errata/RHSA-2002-287.html http://www.redhat.com/support/errata/RHSA-2003-041.html XForce ISS Database: vnc-weak-authentication(5992) https://exchange.xforce.ibmcloud.com/vulnerabilities/5992 Common Vulnerability Exposure (CVE) ID: CVE-2002-1511 BugTraq ID: 6905 http://www.securityfocus.com/bid/6905 Conectiva Linux advisory: CLSA-2003:640 http://security.gentoo.org/glsa/glsa-200302-15.xml http://www.redhat.com/support/errata/RHSA-2003-068.html http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/56161 http://www.iss.net/security_center/static/11384.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.