Test ID:	1.3.6.1.4.1.25623.1.1.2.2017.1052
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2017-1052)
Summary:	The remote host is missing an update for the Huawei EulerOS 'libvirt' package(s) announced via the EulerOS-SA-2017-1052 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'libvirt' package(s) announced via the EulerOS-SA-2017-1052 advisory. Vulnerability Insight: It was found that setting a VNC password to an empty string in libvirt did not disable all access to the VNC server as documented, instead it allowed access with no authentication required. An attacker could use this flaw to access a VNC server with an empty VNC password without any authentication.(CVE-2016-5008) Affected Software/OS: 'libvirt' package(s) on Huawei EulerOS V2.0SP2. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5008 91562 http://www.securityfocus.com/bid/91562 DSA-3613 http://www.debian.org/security/2016/dsa-3613 FEDORA-2016-65cc608ebe https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZZMOMRXNPALA34XDF5NK363KDLAYSTL/ FEDORA-2016-7b7e16a39e https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTQF6LXKEEMJG4VOOCIAPJAD6ACBYP4W/ RHSA-2016:2577 http://rhn.redhat.com/errata/RHSA-2016-2577.html USN-3576-1 https://usn.ubuntu.com/3576-1/ http://security.libvirt.org/2016/0001.html https://bugzilla.redhat.com/show_bug.cgi?id=1180092 openSUSE-SU-2016:1809 http://lists.opensuse.org/opensuse-updates/2016-07/msg00054.html openSUSE-SU-2016:1810 http://lists.opensuse.org/opensuse-updates/2016-07/msg00055.html openSUSE-SU-2016:1975 http://lists.opensuse.org/opensuse-updates/2016-08/msg00024.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.