Test ID:	1.3.6.1.4.1.25623.1.1.4.2012.0479.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2012:0479-1)
Summary:	The remote host is missing an update for the 'OpenSSL' package(s) announced via the SUSE-SU-2012:0479-1 advisory.
Description:	Summary: The remote host is missing an update for the 'OpenSSL' package(s) announced via the SUSE-SU-2012:0479-1 advisory. Vulnerability Insight: The following security issues have been fixed: * Specially crafted MIME headers could cause openssl's ans1 parser to dereference a NULL pointer leading to a Denial of Service (CVE-2006-7250) or fail verfication (CVE-2012-1165). * The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL was vulnerable to a Million Message Attack (MMA) adaptive chosen ciphertext attack (CVE-2012-0884). Additionally, the following issues have been fixed: * bnc#749213 - Free headers after use in error message * bnc#749210 - Symmetric crypto errors in PKCS7_decrypt * bnc#749735 - Memory leak when creating public keys Security Issue references: * CVE-2006-7250 > * CVE-2012-1165 > * CVE-2012-0884 > Affected Software/OS: 'OpenSSL' package(s) on SUSE Linux Enterprise Desktop 11-SP1, SUSE Linux Enterprise Desktop 11-SP2, SUSE Linux Enterprise Server 11-SP1, SUSE Linux Enterprise Server 11-SP2, SUSE Linux Enterprise Software Development Kit 11-SP1, SUSE Linux Enterprise Software Development Kit 11-SP2. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-7250 BugTraq ID: 52181 http://www.securityfocus.com/bid/52181 HPdes Security Advisory: HPSBUX02782 http://marc.info/?l=bugtraq&m=133728068926468&w=2 HPdes Security Advisory: SSRT100844 http://marc.info/?l=openssl-dev&m=115685408414194&w=2 http://www.mail-archive.com/openssl-dev@openssl.org/msg30305.html http://www.openwall.com/lists/oss-security/2012/02/27/10 http://www.openwall.com/lists/oss-security/2012/02/28/14 http://www.redhat.com/support/errata/RHSA-2009-1335.html http://secunia.com/advisories/36533 http://secunia.com/advisories/48153 http://secunia.com/advisories/48516 http://secunia.com/advisories/48899 http://www.ubuntu.com/usn/USN-1424-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-0884 CERT/CC vulnerability note: VU#737740 http://www.kb.cert.org/vuls/id/737740 Debian Security Information: DSA-2454 (Google Search) http://www.debian.org/security/2012/dsa-2454 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html HPdes Security Advisory: HPSBMU02776 http://marc.info/?l=bugtraq&m=133951357207000&w=2 HPdes Security Advisory: HPSBOV02793 http://marc.info/?l=bugtraq&m=134039053214295&w=2 HPdes Security Advisory: SSRT100852 HPdes Security Advisory: SSRT100891 RedHat Security Advisories: RHSA-2012:0426 http://rhn.redhat.com/errata/RHSA-2012-0426.html RedHat Security Advisories: RHSA-2012:0488 http://rhn.redhat.com/errata/RHSA-2012-0488.html RedHat Security Advisories: RHSA-2012:0531 http://rhn.redhat.com/errata/RHSA-2012-0531.html RedHat Security Advisories: RHSA-2012:1306 http://rhn.redhat.com/errata/RHSA-2012-1306.html RedHat Security Advisories: RHSA-2012:1307 http://rhn.redhat.com/errata/RHSA-2012-1307.html RedHat Security Advisories: RHSA-2012:1308 http://rhn.redhat.com/errata/RHSA-2012-1308.html http://secunia.com/advisories/48580 http://secunia.com/advisories/48895 http://secunia.com/advisories/48916 http://secunia.com/advisories/57353 SuSE Security Announcement: openSUSE-SU-2012:0547 (Google Search) https://hermes.opensuse.org/messages/14330767 Common Vulnerability Exposure (CVE) ID: CVE-2012-1165 BugTraq ID: 52764 http://www.securityfocus.com/bid/52764 HPdes Security Advisory: HPSBMU02786 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 HPdes Security Advisory: SSRT100877 http://www.openwall.com/lists/oss-security/2012/03/12/3 http://www.openwall.com/lists/oss-security/2012/03/12/6 http://www.openwall.com/lists/oss-security/2012/03/12/7 http://www.openwall.com/lists/oss-security/2012/03/13/2 http://www.securitytracker.com/id?1026787
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.