Detections
Analytics

FreeBSD : lynx -- SSL certificate validation error (e9200f8e-fd34-11eb-afb1-c85b76ce9b5a)

high Nessus Plugin ID 152571

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Axel Beckert reports :

[...] I was able to capture the password given on the commandline in traffic of an TLS handshake using tcpdump and analysing it with Wireshark: [...]

Solution

Update the affected packages.

See Also

https://lists.nongnu.org/archive/html/lynx-dev/2021-08/msg00002.html

http://www.nessus.org/u?eabcf9e0

Plugin Details

Severity: High

ID: 152571

File Name: freebsd_pkg_e9200f8efd3411ebafb1c85b76ce9b5a.nasl

Version: 1.1

Type: local

Published: 8/16/2021

Updated: 8/16/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:ja-lynx, p-cpe:/a:freebsd:freebsd:ja-lynx-current, p-cpe:/a:freebsd:freebsd:lynx, p-cpe:/a:freebsd:freebsd:lynx-current, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 8/14/2021

Vulnerability Publication Date: 8/7/2021