93 matches found
Ubuntu Update for telepathy-gabble USN-1873-1
Check for the Version of telepathy-gabble OpenVAS Vulnerability Test $Id: gbubuntuUSN18731.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for telepathy-gabble USN-1873-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This progra...
Ubuntu: Security Advisory (USN-1873-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 12.04 LTS / 12.10 / 13.04 : telepathy-gabble vulnerabilities (USN-1873-1)
Maksim Otstavnov discovered that telepathy-gabble incorrectly handled TLS when connecting to legacy jabber servers. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. CVE-2013-1431 It was discovered that telepathy-gabb...
Fedora Update for telepathy-gabble FEDORA-2013-9794
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for telepathy-gabble FEDORA-2013-9794
Check for the Version of telepathy-gabble OpenVAS Vulnerability Test Fedora Update for telepathy-gabble FEDORA-2013-9794 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...
FreeBSD : telepathy-gabble -- TLS verification bypass (a3c2dee5-cdb9-11e2-b9ce-080027019be0)
"Simon McVittie reports : This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a 'legacy Jabber' pre-XMPP server, this version of Gabble will not connect until you make one of these configuration changes : . upgrade the server software to something that supports...
[SECURITY] [DSA 2702-1] telepathy-gabble security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2702-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 03, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2702-1 (telepathy-gabble - TLS verification bypass)
Maksim Otstavnov discovered that the Wocky submodule used by telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, does not respect the tls-required flag on legacy Jabber servers. A network intermediary could use this vulnerability to bypass TLS verification and perfor...
CVE-2013-1431
The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...
RHEL 5 / 6 : flash-plugin (RHSA-2012:1431)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1431 advisory. - flash-plugin: multiple code-execution flaws APSB12-24 CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278,...
Ubuntu Update for linux USN-1431-1
Ubuntu Update for Linux kernel vulnerabilities USN-1431-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14311.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1431-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
CVE-2012-1431
CVE-2012-1431 covers a vulnerability in the ELF file parser used by multiple antivirus products (Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo 7424, eSafe 7.0.17.0, F-Prot 4.6.2.117, F-Secure 9.0.16160.0, McAfee Gateway/Webwasher 2010.1C, nProtect 2011-01-17.01, Sophos 4.61.0, Rising 22.83....
CVE-2011-1431
The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TL...
CVE-2011-1431
The CVE concerns STARTTLS in qmail-smtpd.c within qmail-smtpd (netqmail-1.06-tls patch for netqmail 1.06). The root cause is incomplete I/O buffering restrictions, enabling MITM attackers to insert a plaintext command after TLS is established in encrypted SMTP sessions (plaintext command injectio...
CVE-2011-1431
Removed by vendor...
CVE-2010-1431
SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...
CVE-2010-1431
SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...
CVE-2010-1431
The CVE-2010-1431 entry affects Cacti up to version 0.8.7e, where templates_export.php is vulnerable to SQL injection via the export_item_id parameter. This allows remote attackers to execute arbitrary SQL commands against the database. Multiple advisories confirm the issue and patches exist (e.g...
