[slackware-security] openssl

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0433 https://vulners.com/cve/CVE-2010-0740 A...

OpenSSL < 0.9.8n Multiple Vulnerabilities

Binary data 5487.prm...

Important: Red Hat Security Advisory: openssl security update

Updated openssl packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8n-alt1

March 25, 2010 Evgeny Sinelnikov 0.9.8n-alt1 - Updated to 0.9.8n fixes CVE-2010-0740 and CVE-2010-0433...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8n-alt1

March 25, 2010 Evgeny Sinelnikov 0.9.8n-alt1 - Updated to 0.9.8n fixes CVE-2010-0740 and CVE-2010-0433...

Security fix for the ALT Linux 6 package openssl10 version 0.9.8n-alt1

March 25, 2010 Evgeny Sinelnikov 0.9.8n-alt1 - Updated to 0.9.8n fixes CVE-2010-0740 and CVE-2010-0433...

openssl security update

0.9.8e-12.6 - fix CVE-2009-3245 - add missing bnwexpand return checks 570924 0.9.8e-12.5 - fix CVE-2010-0433 - do not pass NULL princ to krb5ktgetentry which in the RHEL-5 and newer versions will crash in such case 569774 0.9.8e-12.4 - do not disable SSLv2 in the renegotiation patch - SSLv2 does...

OpenSSL 'kssl_keytab_is_available()' Denial Of Service Vulnerability (Windows)

This host is installed with OpenSSL and is prone to Denial Of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbopensslsslkssdosvulnwin.nasl 8193 2017-12-20 10:46:55Z cfischer $ OpenSSL 'ksslkeytabisavailable' Denial Of Service Vulnerability Windows Authors: Antu Sanadi Copyright: Copyrigh...

CVE-2010-0433

The ksslkeytabisavailable function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via SS...

Mandriva Update for rsh MDVA-2010:076 (rsh)

Check for the Version of rsh OpenVAS Vulnerability Test Mandriva Update for rsh MDVA-2010:076 rsh Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for rsh MDVA-2010:076 (rsh)

Check for the Version of rsh OpenVAS Vulnerability Test Mandriva Update for rsh MDVA-2010:076 rsh Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CVE-2009-0433

CVE-2009-0433 affects IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19. The issue arises when the Web Server plug-in content buffering is enabled, due to mishandling of client read failures. This can cause a denial of service (daemon c...

Gentoo Security Advisory GLSA 200405-24 (mplayer)

The remote host is missing updates announced in advisory GLSA 200405-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

libxine -- multiple buffer overflows in RTSP

The remote host is missing an update to the system as announced in the referenced advisory. VID 1b70bef4-649f-11d9-a30e-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-06:08.sack.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:08.sack.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-0433

PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter, a different vector than CVE-2007-6614...

CVE-2008-0433

CVE-2008-0433 concerns Agares phpAutoVideo 2.21 and earlier, where a PHP remote file inclusion flaw exists in theme/phpAutoVideo/LightTwoOh/sidebar.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the loadpage parameter. This entry is corrob...

CVE-2007-0433

BEA AquaLogic Enterprise Security 2.0–2.0 SP2, 2.1–2.1 SP1, and 2.2 using Active Directory LDAP for authentication is vulnerable: remote authenticated users can access the server even after the account is disabled. Root cause/technical specifics beyond this description are not provided in the sup...

CVE-2006-0433

CVE-2006-0433 : The FreeBSD vulnerability concerns the TCP/IP stack, where the SACK (Selective Acknowledgement) handling in FreeBSD 5.3 and 5.4 can enter an infinite loop when there is insufficient memory to process an incoming selective acknowledgement, allowing a remote attacker to cause a deni...

FreeBSD Security Advisory FreeBSD-SA-06:08.sack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:08.sack Security Advisory The FreeBSD Project Topic: Infinite loop in SACK handling Category: core Module: netinet Announced: 2006-02-01 Credits: Scott Wood...