Detections
Analytics
FreeBSD : gnutls -- 'gnutls_handshake()' Denial of Service (d864a0a7-6f27-11dd-acfe-00104b9e1a4a)
high Nessus Plugin ID 34019
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Secunia reports :A vulnerability has been reported in GnuTLS, which can potentially be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to a use-after-free error when an application calls 'gnutls_handshake()' for an already valid session and can potentially be exploited, e.g. during re-handshakes.
Solution
Update the affected package.See Also
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2947
Plugin Details
Severity: High
ID: 34019
File Name: freebsd_pkg_d864a0a76f2711ddacfe00104b9e1a4a.nasl
Version: 1.14
Type: local
Family: FreeBSD Local Security Checks
Published: 8/21/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:gnutls, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 8/21/2008
Vulnerability Publication Date: 8/15/2008
Reference Information
CVE: CVE-2008-2377