GLSA-201110-05 : GnuTLS: Multiple vulnerabilities

high Nessus Plugin ID 56458


The remote Gentoo host is missing one or more security-related patches.


The remote host is affected by the vulnerability described in GLSA-201110-05 (GnuTLS: Multiple vulnerabilities)

Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.
Impact :

An attacker could perform man-in-the-middle attacks to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority or to inject an arbitrary amount of chosen plaintext into the beginning of the application protocol stream, allowing for further exploitation.
Workaround :

There is no known workaround at this time.


All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-libs/gnutls-2.10.0' NOTE: This is a legacy GLSA. Updates for all affected architectures are available since August 6, 2010. It is likely that your system is already no longer affected by this issue.

See Also

Plugin Details

Severity: High

ID: 56458

File Name: gentoo_GLSA-201110-05.nasl

Version: 1.11

Type: local

Published: 10/12/2011

Updated: 1/6/2021

Risk Information


Risk Factor: Medium

Score: 5.5


Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: E:POC/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:gnutls, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/10/2011

Reference Information

CVE: CVE-2009-2730, CVE-2009-3555

GLSA: 201110-05

CWE: 310