Oval Definition:
oval:com.ubuntu.precise:def:20148242000
Revision Date
:
2015-10-26
Version
:
1
Title
:
CVE-2014-8242 on Ubuntu 12.04 LTS (precise) - low.
Description
:
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2014-8242
Platform(s)
:
Ubuntu 12.04 LTS
Product(s)
:
Definition Synopsis
Ubuntu 12.04 LTS (precise) is installed.
AND
The 'librsync' package in precise is affected and needs fixing.
BACK