ID de Prueba:	1.3.6.1.4.1.25623.1.0.60319
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:042 (qt4)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to qt4 announced via advisory MDVSA-2008:042. A potential vulnerability was discovered in Qt4 version 4.3.0 through 4.3.2 which may cause a certificate verification in SSL connections not to be performed. As a result, code that uses QSslSocket could be tricked into thinking that the certificate was verified correctly when it actually failed in one or more criteria. The updated packages have been patched to correct this issue. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2008:042 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 Risk factor : Medium CVSS Score: 4.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5965 27112 http://www.securityfocus.com/bid/27112 28228 http://secunia.com/advisories/28228 28321 http://secunia.com/advisories/28321 28636 http://secunia.com/advisories/28636 28999 http://secunia.com/advisories/28999 ADV-2008-0018 http://www.vupen.com/english/advisories/2008/0018 FEDORA-2007-4285 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html FEDORA-2007-4354 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html MDVSA-2008:042 http://www.mandriva.com/security/advisories?name=MDVSA-2008:042 SUSE-SR:2008:002 http://www.novell.com/linux/security/advisories/suse_security_summary_report.html USN-579-1 http://www.ubuntu.com/usn/usn-579-1 http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 https://bugzilla.redhat.com/show_bug.cgi?id=427232
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.