Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://lists.dlitz.net/pipermail/pycrypto/2012q2/000587.html https://bugs.launchpad.net/pycrypto/+bug/985164
http://www.vuxml.org/freebsd/f45c0049-be72-11e1-a284-0023ae8e59f0.html
Insight
The following package is affected: py-pycrypto
CVE-2012-2417
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
Severity
Classification
-
CVE CVE-2012-2417 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities