Test ID:	1.3.6.1.4.1.25623.1.0.70711
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2392-1)
Summary:	The remote host is missing an update for the Debian 'openssl' package(s) announced via the DSA-2392-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'openssl' package(s) announced via the DSA-2392-1 advisory. Vulnerability Insight: Antonio Martin discovered a denial-of-service vulnerability in OpenSSL, an implementation of TLS and related protocols. A malicious client can cause the DTLS server implementation to crash. Regular, TCP-based TLS is not affected by this issue. For the oldstable distribution (lenny), this problem has been fixed in version 0.9.8g-15+lenny16. For the stable distribution (squeeze), this problem has been fixed in version 0.9.8o-4squeeze7. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 1.0.0g-1. We recommend that you upgrade your openssl packages. Affected Software/OS: 'openssl' package(s) on Debian 5, Debian 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0050 1026548 http://www.securitytracker.com/id?1026548 47631 http://secunia.com/advisories/47631 47677 http://secunia.com/advisories/47677 47755 http://secunia.com/advisories/47755 48528 http://secunia.com/advisories/48528 51563 http://www.securityfocus.com/bid/51563 57353 http://secunia.com/advisories/57353 78320 http://osvdb.org/78320 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html DSA-2392 http://www.debian.org/security/2012/dsa-2392 HPSBMU02776 http://marc.info/?l=bugtraq&m=133951357207000&w=2 HPSBOV02793 http://marc.info/?l=bugtraq&m=134039053214295&w=2 HPSBUX02737 http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289 MDVSA-2012:011 http://www.mandriva.com/security/advisories?name=MDVSA-2012:011 SSRT100747 SSRT100852 SSRT100891 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc http://support.apple.com/kb/HT5784 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www.openssl.org/news/secadv_20120118.txt
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.