Test ID:	1.3.6.1.4.1.25623.1.0.69188
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2010:0892
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2010:0892. Openswan is a free implementation of Internet Protocol Security (IPsec) and Internet Key Exchange (IKE). IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Two buffer overflow flaws were found in the Openswan client-side XAUTH handling code used when connecting to certain Cisco gateways. A malicious or compromised VPN gateway could use these flaws to execute arbitrary code on the connecting Openswan client. (CVE-2010-3302, CVE-2010-3308) Two input sanitization flaws were found in the Openswan client-side handling of Cisco gateway banners. A malicious or compromised VPN gateway could use these flaws to execute arbitrary code on the connecting Openswan client. (CVE-2010-3752, CVE-2010-3753) Red Hat would like to thank the Openswan project for reporting these issues. Upstream acknowledges D. Hugh Redelmeier and Paul Wouters as the original reporters. All users of openswan are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the ipsec service will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2010-0892.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 6.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3302 1024749 http://www.securitytracker.com/id?1024749 41769 http://secunia.com/advisories/41769 43588 http://www.securityfocus.com/bid/43588 ADV-2010-2526 http://www.vupen.com/english/advisories/2010/2526 FEDORA-2010-15381 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/048999.html FEDORA-2010-15508 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049053.html FEDORA-2010-15516 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049073.html RHSA-2010:0892 http://www.redhat.com/support/errata/RHSA-2010-0892.html http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt http://www.openswan.org/download/CVE-2010-3302/openswan-2.6.25-CVE-2010-3302.patch http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch Common Vulnerability Exposure (CVE) ID: CVE-2010-3308 http://www.openswan.org/download/CVE-2010-3308/CVE-2010-3308.txt Common Vulnerability Exposure (CVE) ID: CVE-2010-3752 BugTraq ID: 43588 Common Vulnerability Exposure (CVE) ID: CVE-2010-3753
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.