Test ID:	1.3.6.1.4.1.25623.1.0.70764
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201110-01 (openssl)
Summary:	The remote host is missing updates announced in;advisory GLSA 201110-01.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 201110-01. Vulnerability Insight: Multiple vulnerabilities were found in OpenSSL, allowing for the execution of arbitrary code and other attacks. Solution: All OpenSSL users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-libs/openssl-1.0.0e' NOTE: This is a legacy GLSA. Updates for all affected architectures are available since September 17, 2011. It is likely that your system is already no longer affected by most of these issues. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3245 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html BugTraq ID: 38562 http://www.securityfocus.com/bid/38562 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html HPdes Security Advisory: HPSBOV02540 http://marc.info/?l=bugtraq&m=127678688104458&w=2 HPdes Security Advisory: HPSBUX02517 http://marc.info/?l=bugtraq&m=127128920008563&w=2 HPdes Security Advisory: SSRT100058 http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html http://marc.info/?l=openssl-cvs&m=126692180606861&w=2 http://marc.info/?l=openssl-cvs&m=126692159706582&w=2 http://marc.info/?l=openssl-cvs&m=126692170906712&w=2 https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6640 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9790 http://www.redhat.com/support/errata/RHSA-2010-0977.html http://www.redhat.com/support/errata/RHSA-2011-0896.html http://secunia.com/advisories/37291 http://secunia.com/advisories/38761 http://secunia.com/advisories/39461 http://secunia.com/advisories/39932 http://secunia.com/advisories/42724 http://secunia.com/advisories/42733 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://www.ubuntu.com/usn/USN-1003-1 http://www.vupen.com/english/advisories/2010/0839 http://www.vupen.com/english/advisories/2010/0916 http://www.vupen.com/english/advisories/2010/0933 http://www.vupen.com/english/advisories/2010/1216 Common Vulnerability Exposure (CVE) ID: CVE-2009-4355 Debian Security Information: DSA-1970 (Google Search) http://www.debian.org/security/2010/dsa-1970 http://www.mandriva.com/security/advisories?name=MDVSA-2010:022 http://www.openwall.com/lists/oss-security/2010/01/13/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11260 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12168 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6678 RedHat Security Advisories: RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://secunia.com/advisories/38175 http://secunia.com/advisories/38181 http://secunia.com/advisories/38200 SuSE Security Announcement: SUSE-SA:2010:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html http://www.ubuntu.com/usn/USN-884-1 http://www.vupen.com/english/advisories/2010/0124 Common Vulnerability Exposure (CVE) ID: CVE-2010-0433 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 39461 39932 42724 42733 43311 http://secunia.com/advisories/43311 ADV-2010-0839 ADV-2010-0916 ADV-2010-0933 ADV-2010-1216 FEDORA-2010-5357 FEDORA-2010-5744 HPSBUX02517 HPSBUX02531 http://marc.info/?l=bugtraq&m=127557640302499&w=2 MDVSA-2010:076 SSRT100058 SSRT100108 [dovecot] 20100219 segfault - (imap|pop3)-login during nessus scan http://www.mail-archive.com/dovecot%40dovecot.org/msg26224.html [oss-security] 20100303 OpenSSL (with KRB5) remote crash - CVE-2010-0433 http://www.openwall.com/lists/oss-security/2010/03/03/5 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc http://cvs.openssl.org/chngview?cn=19374 http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7 http://www.openssl.org/news/changelog.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html https://bugzilla.redhat.com/show_bug.cgi?id=567711 https://bugzilla.redhat.com/show_bug.cgi?id=569774 https://kb.bluecoat.com/index?page=content&id=SA50 oval:org.mitre.oval:def:12260 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12260 oval:org.mitre.oval:def:6718 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718 oval:org.mitre.oval:def:9856 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9856 Common Vulnerability Exposure (CVE) ID: CVE-2010-0740 1023748 http://www.securitytracker.com/id?1023748 ADV-2010-0710 http://www.vupen.com/english/advisories/2010/0710 APPLE-SA-2011-06-23-1 http://support.apple.com/kb/HT4723 http://www.openssl.org/news/secadv_20100324.txt oval:org.mitre.oval:def:11731 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731 Common Vulnerability Exposure (CVE) ID: CVE-2010-0742 40000 http://secunia.com/advisories/40000 40024 http://secunia.com/advisories/40024 40502 http://www.securityfocus.com/bid/40502 42457 http://secunia.com/advisories/42457 57353 http://secunia.com/advisories/57353 ADV-2010-1313 http://www.vupen.com/english/advisories/2010/1313 ADV-2010-3105 http://www.vupen.com/english/advisories/2010/3105 HPSBUX02610 http://marc.info/?l=bugtraq&m=129138643405740&w=2 SSRT100341 http://cvs.openssl.org/chngview?cn=19693 http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1 http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www.openssl.org/news/secadv_20100601.txt https://bugzilla.redhat.com/show_bug.cgi?id=598738 oval:org.mitre.oval:def:12395 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12395 Common Vulnerability Exposure (CVE) ID: CVE-2010-1633 40503 http://www.securityfocus.com/bid/40503 http://cvs.openssl.org/filediff?f=openssl/crypto/rsa/rsa_pmeth.c&v1=1.34&v2=1.34.2.1 https://bugzilla.redhat.com/show_bug.cgi?id=598732 Common Vulnerability Exposure (CVE) ID: CVE-2010-2939 1024296 http://securitytracker.com/id?1024296 20100807 openssl-1.0.0a http://seclists.org/fulldisclosure/2010/Aug/84 40906 http://secunia.com/advisories/40906 41105 http://secunia.com/advisories/41105 42309 http://secunia.com/advisories/42309 42413 http://secunia.com/advisories/42413 43312 http://secunia.com/advisories/43312 ADV-2010-2038 http://www.vupen.com/english/advisories/2010/2038 ADV-2010-2229 http://www.vupen.com/english/advisories/2010/2229 ADV-2010-3077 http://www.vupen.com/english/advisories/2010/3077 DSA-2100 http://www.debian.org/security/2010/dsa-2100 FreeBSD-SA-10:10 http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc HPSBMA02662 http://marc.info/?l=bugtraq&m=130331363227777&w=2 SSA:2010-326-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793 SSRT100409 SUSE-SR:2010:021 http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html USN-1003-1 [openssl-dev] 20100807 Re: openssl-1.0.0a and glibc detected sthg ;) http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html [openssl-dev] 20100807 openssl-1.0.0a and glibc detected sthg ;) http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html [openssl-dev] 20100808 Re: openssl-1.0.0a and glibc detected sthg ;) http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html [oss-security] 20100812 Re: CVE Request: openssl double free http://www.openwall.com/lists/oss-security/2010/08/11/6 Common Vulnerability Exposure (CVE) ID: CVE-2010-3864 1024743 http://securitytracker.com/id?1024743 42241 http://secunia.com/advisories/42241 42243 http://secunia.com/advisories/42243 42336 http://secunia.com/advisories/42336 42352 http://secunia.com/advisories/42352 42397 http://secunia.com/advisories/42397 44269 http://secunia.com/advisories/44269 ADV-2010-3041 http://www.vupen.com/english/advisories/2010/3041 ADV-2010-3097 http://www.vupen.com/english/advisories/2010/3097 ADV-2010-3121 http://www.vupen.com/english/advisories/2010/3121 DSA-2125 http://www.debian.org/security/2010/dsa-2125 FEDORA-2010-17826 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html FEDORA-2010-17827 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html FEDORA-2010-17847 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051237.html HPSBGN02740 http://marc.info/?l=bugtraq&m=132828103218869&w=2 HPSBMA02658 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 HPSBOV02670 http://marc.info/?l=bugtraq&m=130497251507577&w=2 HPSBUX02638 http://marc.info/?l=bugtraq&m=129916880600544&w=2 RHSA-2010:0888 https://rhn.redhat.com/errata/RHSA-2010-0888.html SSRT100339 SSRT100413 SSRT100475 SSRT100741 SUSE-SR:2010:022 http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html VU#737740 http://www.kb.cert.org/vuls/id/737740 http://blogs.sun.com/security/entry/cve_2010_3864_race_condition http://openssl.org/news/secadv_20101116.txt http://www.adobe.com/support/security/bulletins/apsb11-11.html https://bugzilla.redhat.com/show_bug.cgi?id=649304 Common Vulnerability Exposure (CVE) ID: CVE-2010-4180 1024822 http://www.securitytracker.com/id?1024822 42469 http://secunia.com/advisories/42469 42473 http://secunia.com/advisories/42473 42493 http://secunia.com/advisories/42493 42571 http://secunia.com/advisories/42571 42620 http://secunia.com/advisories/42620 42811 http://secunia.com/advisories/42811 42877 http://secunia.com/advisories/42877 43169 http://secunia.com/advisories/43169 43170 http://secunia.com/advisories/43170 43171 http://secunia.com/advisories/43171 43172 http://secunia.com/advisories/43172 43173 http://secunia.com/advisories/43173 45164 http://www.securityfocus.com/bid/45164 69565 http://osvdb.org/69565 ADV-2010-3120 http://www.vupen.com/english/advisories/2010/3120 ADV-2010-3122 http://www.vupen.com/english/advisories/2010/3122 ADV-2010-3134 http://www.vupen.com/english/advisories/2010/3134 ADV-2010-3188 http://www.vupen.com/english/advisories/2010/3188 ADV-2011-0032 http://www.vupen.com/english/advisories/2011/0032 ADV-2011-0076 http://www.vupen.com/english/advisories/2011/0076 ADV-2011-0268 http://www.vupen.com/english/advisories/2011/0268 DSA-2141 http://www.debian.org/security/2011/dsa-2141 FEDORA-2010-18736 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html FEDORA-2010-18765 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html HPSBHF02706 http://marc.info/?l=bugtraq&m=132077688910227&w=2 HPSBMU02759 http://www.securityfocus.com/archive/1/522176 MDVSA-2010:248 http://www.mandriva.com/security/advisories?name=MDVSA-2010:248 RHSA-2010:0977 RHSA-2010:0978 http://www.redhat.com/support/errata/RHSA-2010-0978.html RHSA-2010:0979 http://www.redhat.com/support/errata/RHSA-2010-0979.html RHSA-2011:0896 SSA:2010-340-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 SSRT100613 SSRT100817 SUSE-SR:2011:001 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html SUSE-SR:2011:009 http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html SUSE-SU-2011:0847 http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html USN-1029-1 http://ubuntu.com/usn/usn-1029-1 http://cvs.openssl.org/chngview?cn=20131 http://openssl.org/news/secadv_20101202.txt https://bugzilla.redhat.com/show_bug.cgi?id=659462 https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST openSUSE-SU-2011:0845 http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html oval:org.mitre.oval:def:18910 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910 Common Vulnerability Exposure (CVE) ID: CVE-2010-4252 1024823 http://securitytracker.com/id?1024823 45163 http://www.securityfocus.com/bid/45163 http://cvs.openssl.org/chngview?cn=20098 http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf https://bugzilla.redhat.com/show_bug.cgi?id=659297 https://github.com/seb-m/jpake oval:org.mitre.oval:def:19039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19039 Common Vulnerability Exposure (CVE) ID: CVE-2011-0014 1025050 http://www.securitytracker.com/id?1025050 43227 http://secunia.com/advisories/43227 43286 http://secunia.com/advisories/43286 43301 http://secunia.com/advisories/43301 43339 http://secunia.com/advisories/43339 46264 http://www.securityfocus.com/bid/46264 70847 http://osvdb.org/70847 ADV-2011-0361 http://www.vupen.com/english/advisories/2011/0361 ADV-2011-0387 http://www.vupen.com/english/advisories/2011/0387 ADV-2011-0389 http://www.vupen.com/english/advisories/2011/0389 ADV-2011-0395 http://www.vupen.com/english/advisories/2011/0395 ADV-2011-0399 http://www.vupen.com/english/advisories/2011/0399 ADV-2011-0603 http://www.vupen.com/english/advisories/2011/0603 DSA-2162 http://www.debian.org/security/2011/dsa-2162 FEDORA-2011-1273 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054007.html HPSBUX02689 http://marc.info/?l=bugtraq&m=131042179515633&w=2 MDVSA-2011:028 http://www.mandriva.com/security/advisories?name=MDVSA-2011:028 NetBSD-SA2011-002 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc RHSA-2011:0677 http://www.redhat.com/support/errata/RHSA-2011-0677.html SSA:2011-041-04 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.668823 SSRT100494 SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html USN-1064-1 http://www.ubuntu.com/usn/USN-1064-1 http://www.openssl.org/news/secadv_20110208.txt https://support.f5.com/csp/article/K10534046 oval:org.mitre.oval:def:18985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18985 Common Vulnerability Exposure (CVE) ID: CVE-2011-3207 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065744.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065712.html http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html HPdes Security Advisory: HPSBMU02752 http://marc.info/?l=bugtraq&m=133226187115472&w=2 HPdes Security Advisory: SSRT100802 http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 http://www.redhat.com/support/errata/RHSA-2011-1409.html http://www.securitytracker.com/id?1026012 http://secunia.com/advisories/45956 Common Vulnerability Exposure (CVE) ID: CVE-2011-3210 1026012 APPLE-SA-2013-06-04-1 HPSBMU02752 HPSBUX02734 http://marc.info/?l=bugtraq&m=132750648501816&w=2 MDVSA-2011:137 SSRT100729 SSRT100802 http://cvs.openssl.org/chngview?cn=21337 http://openssl.org/news/secadv_20110906.txt http://support.apple.com/kb/HT5784 https://bugzilla.redhat.com/show_bug.cgi?id=736079
Copyright	Copyright (C) 2012 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.