ID de Prueba:	1.3.6.1.4.1.25623.1.0.122167
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2011-0677)
Resumen:	The remote host is missing an update for the 'openssl' package(s) announced via the ELSA-2011-0677 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the ELSA-2011-0677 advisory. Vulnerability Insight: [1.0.0-10] - fix OCSP stapling vulnerability - CVE-2011-0014 (#676063) - correct the README.FIPS document [1.0.0-8] - add -x931 parameter to openssl genrsa command to use the ANSI X9.31 key generation method - use FIPS-186-3 method for DSA parameter generation - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable to allow using MD5 when the system is in the maintenance state even if the /proc fips flag is on - make openssl pkcs12 command work by default in the FIPS mode [1.0.0-7] - listen on ipv6 wildcard in s_server so we accept connections from both ipv4 and ipv6 (#601612) - fix openssl speed command so it can be used in the FIPS mode with FIPS allowed ciphers (#619762) [1.0.0-6] - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG - CVE-2010-3864 (#649304) [1.0.0-5] - fix race in extension parsing code - CVE-2010-3864 (#649304) Affected Software/OS: 'openssl' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0014 1025050 http://www.securitytracker.com/id?1025050 43227 http://secunia.com/advisories/43227 43286 http://secunia.com/advisories/43286 43301 http://secunia.com/advisories/43301 43339 http://secunia.com/advisories/43339 44269 http://secunia.com/advisories/44269 46264 http://www.securityfocus.com/bid/46264 57353 http://secunia.com/advisories/57353 70847 http://osvdb.org/70847 ADV-2011-0361 http://www.vupen.com/english/advisories/2011/0361 ADV-2011-0387 http://www.vupen.com/english/advisories/2011/0387 ADV-2011-0389 http://www.vupen.com/english/advisories/2011/0389 ADV-2011-0395 http://www.vupen.com/english/advisories/2011/0395 ADV-2011-0399 http://www.vupen.com/english/advisories/2011/0399 ADV-2011-0603 http://www.vupen.com/english/advisories/2011/0603 APPLE-SA-2011-06-23-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html DSA-2162 http://www.debian.org/security/2011/dsa-2162 FEDORA-2011-1273 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054007.html HPSBMA02658 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 HPSBOV02670 http://marc.info/?l=bugtraq&m=130497251507577&w=2 HPSBUX02689 http://marc.info/?l=bugtraq&m=131042179515633&w=2 MDVSA-2011:028 http://www.mandriva.com/security/advisories?name=MDVSA-2011:028 NetBSD-SA2011-002 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc RHSA-2011:0677 http://www.redhat.com/support/errata/RHSA-2011-0677.html SSA:2011-041-04 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.668823 SSRT100413 SSRT100475 SSRT100494 SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html USN-1064-1 http://www.ubuntu.com/usn/USN-1064-1 http://support.apple.com/kb/HT4723 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www.openssl.org/news/secadv_20110208.txt https://support.f5.com/csp/article/K10534046 oval:org.mitre.oval:def:18985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18985
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.