Test Kennung:	1.3.6.1.4.1.25623.1.0.882978
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for python-paramiko CESA-2018:3347 centos7
Zusammenfassung:	The remote host is missing an update for the 'python-paramiko'; package(s) announced via the CESA-2018:3347 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'python-paramiko' package(s) announced via the CESA-2018:3347 advisory. Vulnerability Insight: The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es): * python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: python-paramiko on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000805 https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html RedHat Security Advisories: RHBA-2018:3497 https://access.redhat.com/errata/RHBA-2018:3497 RedHat Security Advisories: RHSA-2018:3347 https://access.redhat.com/errata/RHSA-2018:3347 RedHat Security Advisories: RHSA-2018:3406 https://access.redhat.com/errata/RHSA-2018:3406 RedHat Security Advisories: RHSA-2018:3505 https://access.redhat.com/errata/RHSA-2018:3505 https://usn.ubuntu.com/3796-1/ https://usn.ubuntu.com/3796-2/ https://usn.ubuntu.com/3796-3/
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.