FreeBSD : irssi -- multiple vulnerabilities (3b7967f1-49e8-11df-83fb-0015587e2cc1)

medium Nessus Plugin ID 45570

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Two vulnerabilities have found in irssi. The first issue could allow man-in-the-middle attacks due to a missing comparison of SSL server hostnames and the certificate domain names (e.g. CN).

A second vulnerability, related to the nick matching code, could be triggered by remote attackers in order to crash an irssi client when leaving a channel.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 45570

File Name: freebsd_pkg_3b7967f149e811df83fb0015587e2cc1.nasl

Version: 1.10

Type: local

Family: FreeBSD Local Security Checks

Published: 4/20/2010

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:irssi, p-cpe:/a:freebsd:freebsd:irssi-devel, p-cpe:/a:freebsd:freebsd:zh-irssi, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 4/19/2010

Vulnerability Publication Date: 4/16/2010

Reference Information

CVE: CVE-2010-1155, CVE-2010-1156

Detections

Analytics