CVE-2015-1094

The connected WatchOS advisory (APPLE-SA-2015-05-19-1) confirms CVE-2015-1094 affects IOAcceleratorFamily and could allow a malicious app to disclose kernel memory. Description: the issue caused kernel memory disclosure and was mitigated by removing unneeded code in IOAcceleratorFamily; the fix i...

openSUSE Security Update : kdelibs4 (openSUSE-SU-2011:0281-1)

KSSL did not properly verify the host name of a certificate if the certificate was issued for an IP address CVE-2011-1094. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdelibs4-4225. The te...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2009-0377)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0377 advisory. 1:1.6.0.0-0.30.b09.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0.0-0.30.b09 - Updated java-1.6.0-openjdk-lcms.patch 1:1.6.0.0-0.29.b09 - Updated...

Oracle Linux 6 : kdelibs (ELSA-2011-0464)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0464 advisory. - rebase the fix for CVE-2011-1094 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2013-1094

CVE-2013-1094 is an XSS vulnerability in the ZENworks Configuration Management (ZCM) 11.2 line, specifically in the ZENworks Control Center/zenworks-core ZCC page. The issue arises from improper validation of an invalid locale, allowing remote attackers to inject arbitrary JavaScript/HTML. Public...

Ubuntu 9.10 / 10.04 LTS / 10.10 : kde4libs vulnerabilities (USN-1110-1)

It was discovered that KDE KSSL did not properly verify X.509 certificates when the certificate was issued for an IP address. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2011-1094 Tim Brown discovered th...

Ubuntu Update for kde4libs USN-1110-1

Ubuntu Update for Linux kernel vulnerabilities USN-1110-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11101.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for kde4libs USN-1110-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

openSUSE Security Update : kdelibs4 (openSUSE-SU-2011:0280-1)

KSSL did not properly verify the host name of a certificate if the certificate was issued for an IP address CVE-2011-1094. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdelibs4-4216. The te...

RHEL 6 : kdelibs (RHSA-2011:0464)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0464 advisory. The kdelibs packages provide libraries for the K Desktop Environment KDE. A cross-site scripting XSS flaw was found in the way KHTML, the HT...

kdelibs security update

6:4.3.4-11.2 - rebase the fix for CVE-2011-1094 6:4.3.4-11.1 - fixes CVE-2011-1094, CVE-2011-1168...

[USN-1110-1] KDE-Libs vulnerabilities

========================================================================== Ubuntu Security Notice USN-1110-1 April 14, 2011 kde4libs vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

SuSE 11.1 Security Update : kdelibs4 (SAT Patch Number 4217)

KSSL did not properly verify the host name of a certificate if the certificate was issued for an IP address CVE-2011-1094. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...

CVE-2011-1094

kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate...

CVE-2011-1094

kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate...

CVE-2011-1094

CVE-2011-1094 affects KDE KDE-kdelibs KSSL prior to version 4.6.1, where hostname verification is not properly performed against the certificate’s subject/subjectAltName. This enables MITM spoofing of SSL servers with certificates issued by legitimate CAs for IP addresses. OpenVAS/OSS advisories ...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

CVE-2010-1094

CVE-2010-1094 describes an SQL injection in News.php of DZ EROTIK Auktionshaus V4rgo, exploitable via the id parameter to execute arbitrary SQL commands remotely. The NVD entry provides CVSSv2 metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P with a base score of 7.5 (HIGH). References include multiple advisor...

CVE-2010-1094

creationtimestamp| type| source ---|---|--- 2010-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11582...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.3. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the IBM Java Runtim...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Network Satellite Server 5.1. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the Sun Java...