Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.kde.org/info/security/advisory-20111003-1.txt http://www.nth-dimension.org.uk/pub/NDSA20111003.txt.asc http://www.vuxml.org/freebsd/6d21a287-fce0-11e0-a828-00235a5f2c9a.html
Insight
The following packages are affected:
kdelibs
rekonq
CVE-2011-3365
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
CVE-2011-3366
Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
Severity
Classification
-
CVE CVE-2011-3365, CVE-2011-3366 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities