Test ID:	1.3.6.1.4.1.25623.1.0.60319
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDVSA-2008:042 (qt4)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to qt4 announced via advisory MDVSA-2008:042. A potential vulnerability was discovered in Qt4 version 4.3.0 through 4.3.2 which may cause a certificate verification in SSL connections not to be performed. As a result, code that uses QSslSocket could be tricked into thinking that the certificate was verified correctly when it actually failed in one or more criteria. The updated packages have been patched to correct this issue. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:042 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5965 27112 http://www.securityfocus.com/bid/27112 28228 http://secunia.com/advisories/28228 28321 http://secunia.com/advisories/28321 28636 http://secunia.com/advisories/28636 28999 http://secunia.com/advisories/28999 ADV-2008-0018 http://www.vupen.com/english/advisories/2008/0018 FEDORA-2007-4285 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html FEDORA-2007-4354 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html MDVSA-2008:042 http://www.mandriva.com/security/advisories?name=MDVSA-2008:042 SUSE-SR:2008:002 http://www.novell.com/linux/security/advisories/suse_security_summary_report.html USN-579-1 http://www.ubuntu.com/usn/usn-579-1 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 https://bugzilla.redhat.com/show_bug.cgi?id=427232
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.