Debian DSA-882-1 : openssl095 - cryptographic weakness

NASLDB: Debian DSA-882-1 : openssl095 - cryptographic weakness

General

ID: 22748
Name: Debian DSA-882-1 : openssl095 – cryptographic weakness

Summary: Checks dpkg output for the updated package

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS Temporal Vector: –

Port: 0
Family: Debian Local Security Checks
Type: Local

Description

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer
(OpenSSL) library that can allow an attacker to perform active
protocol-version rollback attacks that could lead to the use of the
weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS
1.0.

The following matrix explains which version in which distribution has
this problem corrected.

Â oldstable (woody) stable (sarge) unstable (sid)
openssl 0.9.6c-2.woody.8 0.9.7e-3sarge1 0.9.8-3
openssl094 0.9.4-6.woody.4 n/a n/a
openssl095 0.9.5a-6.woody.6 n/a n/a
openssl096 n/a 0.9.6m-1sarge1 n/a
openssl097 n/a n/a 0.9.7g-5

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2005-2969
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2005/11/04
Plugin Release: 2006/10/14

Plugin

Version: 1.7
Filename: debian_DSA-882.nasl
Filesize: 3208 bytes
MD5 Hash: f724ba68847f30e296fad3a7f0408523

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG