Summary
The remote host is missing an update to libgdata
announced via advisory DSA 2482-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202482-1
Insight
Vreixo Formoso discovered that libgdata, a library used to access various Google services, wasn't validating certificates against trusted system root CAs when using an https connection.
For the stable distribution (squeeze), this problem has been fixed in version 0.6.4-2+squeeze1.
For the testing distribution (wheezy), this problem has been fixed in version 0.10.2-1.
For the unstable distribution (sid), this problem has been fixed in version 0.10.2-1.
We recommend that you upgrade your libgdata packages.
Severity
Classification
-
CVE CVE-2012-2653 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities