Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.123892
Kategorie:Oracle Linux Local Security Checks
Titel:Oracle: Security Advisory (ELSA-2012-0884)
Zusammenfassung:The remote host is missing an update for the 'openssh' package(s) announced via the ELSA-2012-0884 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'openssh' package(s) announced via the ELSA-2012-0884 advisory.

Vulnerability Insight:
[5.3p1-81]
- fixes in openssh-5.3p1-required-authentications.patch (#657378)

[5.3p1-79]
- fix forward on non-localhost ports with IPv6 (#732955)

[5.3p1-78]
- clear SELinux exec context before exec passwd (#814691)

[5.3p1-77]
- prevent post-auth resource exhaustion (#809938)

[5.3p1-76]
- don't escape backslah in a banner (#809619)

[5.3p1-75]
- fix various issues in openssh-5.3p1-required-authentications.patch (#805901)

[5.3p1-74]
- fix out-of-memory killer patch (#744236)

[5.3p1-73]
- remove openssh-4.3p2-no-v6only.patch (#732955)
- adjust Linux out-of-memory killer (#744236)
- fix sshd init script - check existence of crypto (#797384)
- add RequiredAuthentications[12] (#657378)
- run privsep slave process as the users SELinux context (#798241)

[5.3p1-72]
- drop CAVS test driver (#782091)

[5.3p1-71]
- enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
- add CAVS test driver for the aes-ctr ciphers (#782091)

Affected Software/OS:
'openssh' package(s) on Oracle Linux 6.

Solution:
Please install the updated package(s).

CVSS Score:
3.5

CVSS Vector:
AV:N/AC:M/Au:S/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-5000
http://seclists.org/fulldisclosure/2011/Aug/2
http://site.pi3.com.pl/adv/ssh_1.txt
RedHat Security Advisories: RHSA-2012:0884
http://rhn.redhat.com/errata/RHSA-2012-0884.html
CopyrightCopyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.