Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2015-01455 (CVE-2008-4989)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации
Summary
Множественные уязвимости пакета gnutls-bin операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.
Severity
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-295 - Неправильное подтверждение подлинности сертификата
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
s390x:
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
i686:
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
hppa:
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
sparc:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
x86-64:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
alpha:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
ia64:
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
mips:
libgnutls13 - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
noarch:
gnutls-doc - 1.4.4-3+etch2
gnutls-doc - 1.4.4-3+etch3
mipsel:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
arm:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\ts390x:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\ti686:\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\thppa:\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tsparc:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tx86-64:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\talpha:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tia64:\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\tmips:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tnoarch:\n\t\tgnutls-doc - 1.4.4-3+etch2\n\t\tgnutls-doc - 1.4.4-3+etch3\n\tmipsel:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\tarm:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "13.11.2008",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01455",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-4989, DSA-1719, ID:1400173",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-295)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 gnutls-bin \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1719/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-295",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)"
}
BDU:2015-01456 (CVE-2008-4989)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации
Summary
Множественные уязвимости пакета gnutls-doc операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.
Severity
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-295 - Неправильное подтверждение подлинности сертификата
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
s390x:
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
i686:
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
hppa:
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
sparc:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
x86-64:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
alpha:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
ia64:
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
mips:
libgnutls13 - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
noarch:
gnutls-doc - 1.4.4-3+etch2
gnutls-doc - 1.4.4-3+etch3
mipsel:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
arm:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\ts390x:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\ti686:\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\thppa:\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tsparc:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tx86-64:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\talpha:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tia64:\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\tmips:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tnoarch:\n\t\tgnutls-doc - 1.4.4-3+etch2\n\t\tgnutls-doc - 1.4.4-3+etch3\n\tmipsel:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\tarm:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01456",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-4989, DSA-1719, ID:1400173",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-295)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 gnutls-doc \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1719/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-295",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)"
}
BDU:2015-01457 (CVE-2008-4989)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации
Summary
Множественные уязвимости пакета libgnutls13 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.
Severity
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-295 - Неправильное подтверждение подлинности сертификата
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
s390x:
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
i686:
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
hppa:
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
sparc:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
x86-64:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
alpha:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
ia64:
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
mips:
libgnutls13 - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
noarch:
gnutls-doc - 1.4.4-3+etch2
gnutls-doc - 1.4.4-3+etch3
mipsel:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
arm:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\ts390x:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\ti686:\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\thppa:\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tsparc:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tx86-64:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\talpha:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tia64:\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\tmips:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tnoarch:\n\t\tgnutls-doc - 1.4.4-3+etch2\n\t\tgnutls-doc - 1.4.4-3+etch3\n\tmipsel:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\tarm:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01457",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-4989, DSA-1719, ID:1400173",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-295)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libgnutls13 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1719/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-295",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)"
}
BDU:2015-01458 (CVE-2008-4989)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации
Summary
Множественные уязвимости пакета libgnutls13-dbg операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.
Severity
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-295 - Неправильное подтверждение подлинности сертификата
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
s390x:
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
i686:
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
hppa:
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
sparc:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
x86-64:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
alpha:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
ia64:
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
mips:
libgnutls13 - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
noarch:
gnutls-doc - 1.4.4-3+etch2
gnutls-doc - 1.4.4-3+etch3
mipsel:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
arm:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\ts390x:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\ti686:\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\thppa:\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tsparc:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tx86-64:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\talpha:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tia64:\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\tmips:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tnoarch:\n\t\tgnutls-doc - 1.4.4-3+etch2\n\t\tgnutls-doc - 1.4.4-3+etch3\n\tmipsel:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\tarm:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01458",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-4989, DSA-1719, ID:1400173",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-295)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libgnutls13-dbg \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1719/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-295",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)"
}
BDU:2015-01459 (CVE-2008-4989)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации
Summary
Множественные уязвимости пакета libgnutls-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно.
Severity
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-295 - Неправильное подтверждение подлинности сертификата
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
s390x:
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
i686:
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
hppa:
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
sparc:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
x86-64:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
alpha:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
ia64:
gnutls-bin - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
mips:
libgnutls13 - 1.4.4-3+etch3
libgnutls-dev - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
noarch:
gnutls-doc - 1.4.4-3+etch2
gnutls-doc - 1.4.4-3+etch3
mipsel:
libgnutls13 - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch3
libgnutls13-dbg - 1.4.4-3+etch2
gnutls-bin - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch3
arm:
libgnutls-dev - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch2
libgnutls13 - 1.4.4-3+etch3
libgnutls13 - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch2
libgnutls-dev - 1.4.4-3+etch2
libgnutls13-dbg - 1.4.4-3+etch3
gnutls-bin - 1.4.4-3+etch3
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\ts390x:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\ti686:\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\thppa:\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tsparc:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tx86-64:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\talpha:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\tia64:\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\tmips:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\tnoarch:\n\t\tgnutls-doc - 1.4.4-3+etch2\n\t\tgnutls-doc - 1.4.4-3+etch3\n\tmipsel:\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tgnutls-bin - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\tarm:\n\t\tlibgnutls-dev - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch2\n\t\tlibgnutls13 - 1.4.4-3+etch3\n\t\tlibgnutls13 - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch2\n\t\tlibgnutls-dev - 1.4.4-3+etch2\n\t\tlibgnutls13-dbg - 1.4.4-3+etch3\n\t\tgnutls-bin - 1.4.4-3+etch3",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01459",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-4989, DSA-1719, ID:1400173",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-295)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libgnutls-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1719/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-295",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)"
}