|
Family: Debian Local Security Checks --> Category: infos
[DSA875] DSA-875-1 openssl094 Vulnerability Scan
Vulnerability Scan Summary DSA-875-1 openssl094
Detailed Explanation for this Vulnerability Test
Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer
(OpenSSL) library that can allow a possible hacker to perform active
protocol-version rollback attacks that could lead to the use of the
weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS
1.0.
The following matrix explains which version in which distribution has
this problem corrected.
We recommend that you upgrade your libssl packages.
Solution : http://www.debian.org/security/2005/dsa-875
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|