Test ID:	1.3.6.1.4.1.25623.1.0.59773
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-1444 (openssl)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to openssl announced via advisory FEDORA-2007-1444. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. ChangeLog: * Fri Aug 3 2007 Tomas Mraz 0.9.8b-14 - use localhost in testsuite, hopefully fixes slow build in koji - CVE-2007-3108 - fix side channel attack on private keys (#250577) - make ssl session cache id matching strict (#233599) * Wed Jul 25 2007 Tomas Mraz 0.9.8b-13 - allow building on ARM architectures (#245417) - use reference timestamps to prevent multilib conflicts (#218064) - -devel package must require pkgconfig (#241031) References: [ 1 ] Bug #250574 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=250574 [ 2 ] CVE-2007-3108 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3108 Updated packages: 4ff56d48eaa6017846b5e9e49e540d227aa2eabc openssl-0.9.8b-14.fc7.i686.rpm e59c247885c36084689795e978688b6fd7251e32 openssl-debuginfo-0.9.8b-14.fc7.i686.rpm c0064712d13867bf9b3cc8415c5b1e91d0e497c7 openssl-perl-0.9.8b-14.fc7.ppc64.rpm afeb2c25d37ef291e57ae4837d4932542d4a292b openssl-debuginfo-0.9.8b-14.fc7.ppc64.rpm 086ea64e1b9cfba76ad12d864994665fa387ab26 openssl-0.9.8b-14.fc7.ppc64.rpm 87cb8e3669be8e61b4619e25283df8f868eda20e openssl-devel-0.9.8b-14.fc7.ppc64.rpm dc972280a4e4d077356f1cb7ccf63960439f3d3e openssl-0.9.8b-14.fc7.i386.rpm 620aa50b9459d5e8776aba2af12046119c3191ad openssl-devel-0.9.8b-14.fc7.i386.rpm 0ebf88b026fbd991cb4b62b0e919528e2fcac405 openssl-debuginfo-0.9.8b-14.fc7.i386.rpm f9eff547f71f84dac367beacff988382eabc3a10 openssl-perl-0.9.8b-14.fc7.i386.rpm f5fececbc6600fedeaec7dd429ef815820961d89 openssl-devel-0.9.8b-14.fc7.x86_64.rpm 7e82ed164e5b33d57e5b6077c526a7827a14ee04 openssl-perl-0.9.8b-14.fc7.x86_64.rpm 8a151e49fddf479b8ebd1d5892b248b72032804b openssl-0.9.8b-14.fc7.x86_64.rpm c1058df1c07f5e9a1dc31229df821fcf4c30a0a7 openssl-debuginfo-0.9.8b-14.fc7.x86_64.rpm ccf63970d91d77dcce8fe828e74313f21d883e66 openssl-0.9.8b-14.fc7.ppc.rpm 6432e38cb901cd75023a6ef8c78e88a3f651ffef openssl-perl-0.9.8b-14.fc7.ppc.rpm ceffae71b23eebc5a806dea24c53475524fab242 openssl-devel-0.9.8b-14.fc7.ppc.rpm 03835d76d7fbee4f1c9613ef09ef64c9d8ebda1c openssl-debuginfo-0.9.8b-14.fc7.ppc.rpm 0d6d49b150e21d9666bd2c157def1fe752967609 openssl-0.9.8b-14.fc7.src.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://docs.fedoraproject.org/yum/. Solution: Apply the appropriate updates. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-1444 Risk factor : Low CVSS Score: 1.2
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3108 20070813 FLEA-2007-0043-1 openssl http://www.securityfocus.com/archive/1/476341/100/0/threaded 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages http://www.securityfocus.com/archive/1/485936/100/0/threaded 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages http://www.securityfocus.com/archive/1/486859/100/0/threaded 25163 http://www.securityfocus.com/bid/25163 26411 http://secunia.com/advisories/26411 26893 http://secunia.com/advisories/26893 27021 http://secunia.com/advisories/27021 27078 http://secunia.com/advisories/27078 27097 http://secunia.com/advisories/27097 27205 http://secunia.com/advisories/27205 27330 http://secunia.com/advisories/27330 27770 http://secunia.com/advisories/27770 27870 http://secunia.com/advisories/27870 28368 http://secunia.com/advisories/28368 30161 http://secunia.com/advisories/30161 30220 http://secunia.com/advisories/30220 31467 http://secunia.com/advisories/31467 31489 http://secunia.com/advisories/31489 31531 http://secunia.com/advisories/31531 ADV-2007-2759 http://www.vupen.com/english/advisories/2007/2759 ADV-2007-4010 http://www.vupen.com/english/advisories/2007/4010 ADV-2008-0064 http://www.vupen.com/english/advisories/2008/0064 ADV-2008-2361 http://www.vupen.com/english/advisories/2008/2361 ADV-2008-2362 http://www.vupen.com/english/advisories/2008/2362 ADV-2008-2396 http://www.vupen.com/english/advisories/2008/2396 DSA-1571 http://www.debian.org/security/2008/dsa-1571 GLSA-200710-06 http://security.gentoo.org/glsa/glsa-200710-06.xml GLSA-200805-07 http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml MDKSA-2007:193 http://www.mandriva.com/security/advisories?name=MDKSA-2007:193 RHSA-2007:0813 http://www.redhat.com/support/errata/RHSA-2007-0813.html RHSA-2007:0964 http://www.redhat.com/support/errata/RHSA-2007-0964.html RHSA-2007:1003 http://www.redhat.com/support/errata/RHSA-2007-1003.html USN-522-1 https://usn.ubuntu.com/522-1/ VU#724968 http://www.kb.cert.org/vuls/id/724968 [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages http://lists.vmware.com/pipermail/security-announce/2008/000002.html http://cvs.openssl.org/chngview?cn=16275 http://openssl.org/news/patch-CVE-2007-3108.txt http://support.attachmate.com/techdocs/2374.html http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability http://www.kb.cert.org/vuls/id/RGII-74KLP3 http://www.vmware.com/security/advisories/VMSA-2008-0001.html http://www.vmware.com/security/advisories/VMSA-2008-0013.html https://issues.rpath.com/browse/RPL-1613 https://issues.rpath.com/browse/RPL-1633 oval:org.mitre.oval:def:9984 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.