Detections
Analytics
FreeBSD : py-rsa -- Bleichenbacher'06 signature forgery vulnerability (e78bfc9d-cb1e-11e5-b251-0050562a4d7b)
medium Nessus Plugin ID 88585
Language:
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Filippo Valsorda reports :python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with low public exponent.
Solution
Update the affected packages.See Also
http://www.nessus.org/u?24eb0dd8
http://www.nessus.org/u?525636eb
https://nvd.nist.gov/vuln/detail/CVE-2016-1494
https://www.openwall.com/lists/oss-security/2016/01/05/3
Plugin Details
Severity: Medium
ID: 88585
File Name: freebsd_pkg_e78bfc9dcb1e11e5b2510050562a4d7b.nasl
Version: 2.6
Type: local
Family: FreeBSD Local Security Checks
Published: 2/5/2016
Updated: 1/4/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:py27-rsa, p-cpe:/a:freebsd:freebsd:py32-rsa, p-cpe:/a:freebsd:freebsd:py33-rsa, p-cpe:/a:freebsd:freebsd:py34-rsa, p-cpe:/a:freebsd:freebsd:py35-rsa, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 2/4/2016
Vulnerability Publication Date: 1/5/2016
Reference Information
CVE: CVE-2016-1494