Debian DSA-1935-1 : gnutls13 gnutls26 - several vulnerabilities
high Nessus Plugin ID 44800
Language:
New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it is different from CVSS.
VPR Score: 6.7
Synopsis
The remote Debian host is missing a security-related update.Description
Dan Kaminsky and Moxie Marlinspike discovered that gnutls, an implementation of the TLS/SSL protocol, does not properly handle a '\0' character in a domain name in the subject's Common Name or Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.(CVE-2009-2730 )
In addition, with this update, certificates with MD2 hash signatures are no longer accepted since they're no longer considered cryptograhically secure. It only affects the oldstable distribution (etch).(CVE-2009-2409 )
Solution
Upgrade the gnutls13/gnutls26 packages.For the oldstable distribution (etch), these problems have been fixed in version 1.4.4-3+etch5 for gnutls13.
For the stable distribution (lenny), these problems have been fixed in version 2.4.2-6+lenny2 for gnutls26.
See Also
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=541439
https://security-tracker.debian.org/tracker/CVE-2009-2730
Plugin Details
Severity: High
ID: 44800
File Name: debian_DSA-1935.nasl
Version: 1.12
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 2/24/2010
Updated: 1/4/2021
Dependencies: 12634
Risk Information
Risk Factor: High
VPR Score: 6.7
CVSS v2.0
Base Score: 7.5
Temporal Score: 5.5
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Temporal Vector: E:U/RL:OF/RC:C
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:gnutls13, p-cpe:/a:debian:debian_linux:gnutls26, cpe:/o:debian:debian_linux:4.0, cpe:/o:debian:debian_linux:5.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 11/17/2009
Reference Information
CVE: CVE-2009-2409, CVE-2009-2730
BID: 35952
DSA: 1935
CWE: 310