CVE-2009-0563

creationtimestamp| type| source ---|---|--- 2013-08-22 13:37:21+00:00| seen| MISP/521612f2-f058-437d-83c4-0d5dac1d4fa4 2013-08-22 15:03:43+00:00| seen| MISP/521625ab-fa68-431c-bfab-6a83ac1d4fa4 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:35:59+00:00|...

Design/Logic Flaw

Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the 1...

CVE-2013-2155

Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the 1...

Mozilla Firefox 3.5.4 - Local Color Map Exploit

This is a heap overflow exploit that leverages a local color map parsing bug in Firefox versions 3.5.4 and below, 3.0.15 and below, and SeaMonkey versions 2.0 and below. include include / x90c local color map 1day exploit CVE-2009-3373 Firefox local color map 1day exploit MFSA 2009-56 Firefox loc...

Design/Logic Flaw

The ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate...

Design/Logic Flaw

The OpenSSL::SSL.verifycertificateidentity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows...

Design/Logic Flaw

The opensslx509parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...

Oracle Linux 3 / 4 : openssl096b (ELSA-2010-0173)

From Red Hat Security Advisory 2010:0173 : Updated openssl096b packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Oracle Linux 6 : libtiff (ELSA-2011-0452)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0452 advisory. 3.9.4-1.el60.3 - Add fix for CVE-2009-5022 Resolves: 696143 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 : subversion (ELSA-2009-1203)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1203 advisory. 1.4.2-4.0.1.el53.1 - Add oracle-enterprise.patch 1.4.2-4.el53.1 - add security fix for CVE-2009-2411 515817 Tenable has extracted the preceding description bloc...

Oracle Linux 5 : postgresql (ELSA-2009-1484)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1484 advisory. 8.1.18-2.el54.1 - Remove unnecessary .o file that confuses TPS tests Related: 525284 8.1.18-1.el54.1 - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922...

Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1134)

From Red Hat Security Advisory 2009:1134 : Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser,...

Oracle Linux 5 : sudo (ELSA-2009-0267)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-0267 advisory. 1.6.9p17-3.el53.1 - audit patch rediff one chunk failed to apply due to fuzz=0 - Fix for incorrect handling of groups in RunasUser 481720 Resolves: 481820 Tenab...

Oracle Linux 5 : libtiff (ELSA-2009-1159)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1159 advisory. - Fix buffer overrun risks caused by unchecked integer overflow CVE-2009-2347 Resolves: 507725 - Fix some more LZW decoding vulnerabilities CVE-2009-22...

Oracle Linux 4 : kdegraphics (ELSA-2009-1512)

From Red Hat Security Advisory 2009:1512 : Updated kdegraphics packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain...

Oracle Linux 3 : libpng (ELSA-2009-0340)

From Red Hat Security Advisory 2009:0340 : Updated libpng and libpng10 packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng packages contain a library of...

Oracle Linux 5 : wireshark (ELSA-2009-1100)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1100 advisory. 1.0.8-1.0.1.el53.1 - Add oracle-ocfs2-network.patch 1.0.8-1.1 - bump release to match Z-stream/EUS NVR policy - Resolves: 501950 1.0.8-1 - upgrade to...

Oracle Linux 5 : gnutls (ELSA-2009-1232)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1232 advisory. 1.4.1-3.5 - fix NUL characters in DN and SAN cert fields issue, make sure gnutlsx509crtcheckhostname fails when certificate has no CN or SAN CVE-2009-2730 51623...

Oracle Linux 4 : kernel (ELSA-2009-1541)

From Red Hat Security Advisory 2009:1541 : Updated kernel packages that fix security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the cor...

Oracle Linux 5 : krb5 (ELSA-2009-0408)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0408 advisory. - update to revised patch for CVE-2009-0844/CVE-2009-0845 - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism 490635,...