Test ID:	1.3.6.1.4.1.25623.1.0.60450
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-579-1 (qt4-x11)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to qt4-x11 announced via advisory USN-579-1. A security issue affects the following Ubuntu releases: Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. It was discovered that QSslSocket did not properly verify SSL certificates. A remote attacker may be able to trick applications using QSslSocket into accepting invalid SSL certificates. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 7.10: libqt4-core 4.3.2-0ubuntu3.2 After a standard system upgrade you need to restart applications linked against Qt to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-579-1 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5965 27112 http://www.securityfocus.com/bid/27112 28228 http://secunia.com/advisories/28228 28321 http://secunia.com/advisories/28321 28636 http://secunia.com/advisories/28636 28999 http://secunia.com/advisories/28999 ADV-2008-0018 http://www.vupen.com/english/advisories/2008/0018 FEDORA-2007-4285 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html FEDORA-2007-4354 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html MDVSA-2008:042 http://www.mandriva.com/security/advisories?name=MDVSA-2008:042 SUSE-SR:2008:002 http://www.novell.com/linux/security/advisories/suse_security_summary_report.html USN-579-1 http://www.ubuntu.com/usn/usn-579-1 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 https://bugzilla.redhat.com/show_bug.cgi?id=427232
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.