openSUSE Security Update : libesmtp (openSUSE-SU-2010:0220-1)

libesmtp did not properly handle wildcards and embedded null characters in the Common Name of X.509 certificates CVE-2010-1192, CVE-2010-1194. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

CVE-2010-1194

The connected sources confirm CVE-2010-1194 affects libESMTP (notably 1.0.3.r1 and 1.0.4) where match_component in smtp-tls.c treats strings as equal if one is a substring of the other, enabling remote certificate spoofing via crafted subjectAltName. Public advisories (Mandriva) indicate patches ...

CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

openSUSE Security Update : pango (pango-1829)

Long glyph string could trigger a heap-based buffer overflow in pango CVE-2009-1194. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pango-1829. The text description of this plugin is C SUSE...

openSUSE Security Update : pango (pango-1829)

Long glyph string could trigger a heap-based buffer overflow in pango CVE-2009-1194. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pango-1829. The text description of this plugin is C SUSE...

SuSE9 Security Update : pango (YOU Patch Number 12575)

A long glyph string can trigger a heap-based buffer overflow in pango. CVE-2009-1194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid44591; scriptversion"1.10";...

SuSE 11 Security Update : pango (SAT Patch Number 1880)

A long glyph string can trigger a heap-based buffer overflow in pango. CVE-2009-1194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

Mandriva Security Advisory MDVSA-2009:158-2 (pango)

The remote host is missing an update to pango announced via advisory MDVSA-2009:158-2. OpenVAS Vulnerability Test $Id: mdksa20091582.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:158-2 pango Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

SLES11: Security update for MozillaFirefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations mozilla-xulrunner190 mozilla-xulrunner190-gnomevfs mozilla-xulrunner190-translations More details may also be foun...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6379)

The MozillaFirefox 3.0.12 release fixes various bugs and some critical security issues. MFSA 2009-34 / CVE-2009-2462 / CVE-2009-2463 / CVE-2009-2464 / CVE-2009-2465 / CVE-2009-2466: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in...

SuSE 11 Security Update : MozillaFirefox (SAT Patch Number 1134)

The Mozilla Firefox 3.0.12 release fixes various bugs and some critical security issues. - Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory...

Mandrake Security Advisory MDVSA-2009:175 (pango)

The remote host is missing an update to pango announced via advisory MDVSA-2009:175. OpenVAS Vulnerability Test $Id: mdksa2009175.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:175 pango Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1135)

The MozillaFirefox 3.0.12 release fixes various bugs and some critical security issues. MFSA 2009-34 / CVE-2009-2462 / CVE-2009-2463 / CVE-2009-2464 / CVE-2009-2465 / CVE-2009-2466: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in...

VMSA-2008-0010 : Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

ESX patches and updates for VirtualCenter fix the following application vulnerabilities. a. Tomcat Server Security Update The ESX patches and the updates for VirtualCenter update the Tomcat Server package to version 5.5.26, which addresses multiple security issues that existed in earlier releases...

Mozilla Firefox MFSA存在多个安全漏洞

Bugraq ID: 35758 CVE ID：CVE-2009-1194 CVE-2009-2462 CVE-2009-2463 CVE-2009-2464 CVE-2009-2465 CVE-2009-2466 CVE-2009-2467 CVE-2009-2468 CVE-2009-2469 CVE-2009-2471 CVE-2009-2472 CNCVE ID：CNCVE-20091194 CNCVE-20092462 CNCVE-20092463 CNCVE-20092464 CNCVE-20092465 CNCVE-20092466 CNCVE-20092467...

openSUSE Security Update : pango (pango-824)

This update of pango fixes a segfault in libpango that can be triggered by visiting websites. CVE-2009-1194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pango-824. The text description of...

FreeBSD Ports: pango, linux-pango, linux-f8-pango

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: pango, linux-pango, linux-f8-pango

The remote host is missing an update to the system as announced in the referenced advisory. VID 4b172278-3f46-11de-becb-001cc0377035 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4b172278-3f46-11de-becb-001cc0377035 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...