Test ID:	1.3.6.1.4.1.25623.1.0.52943
Category:	Turbolinux Local Security Tests
Title:	Turbolinux TLSA-2003-36 (kdelibs)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kdelibs announced via advisory TLSA-2003-36. Main libraries for the K Desktop Environment. KDE's SSL implementation in the affected versions matches certificates based on IP number instead of hostname. Due to this it may fail to notice a man-in-the-middle attack. Users of Konqueror and other SSL enabled KDE software may fall victim to a malicious man-in-the-middle attack without noticing. In such case the user will be under the impression that there is a secure connection with a trusted site while in fact a different site has been connected to. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2003-36 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.