openSUSE Security Update : libneon-devel (libneon-devel-1377)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers CVE-2009-2408. Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

SuSE 11 Security Update : libneon (SAT Patch Number 1376)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers. CVE-2009-2408 Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:048)

The remote host is missing updates announced in advisory SUSE-SA:2009:048. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Mandrake Security Advisory MDVSA-2009:288 (proftpd)

The remote host is missing an update to proftpd announced via advisory MDVSA-2009:288. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:288 (proftpd)

The remote host is missing an update to proftpd announced via advisory MDVSA-2009:288. OpenVAS Vulnerability Test $Id: mdksa2009288.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:288 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2009-3765

muttssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

Design/Logic Flaw

muttssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

SLES10: Security update for mutt

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mutt More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES10: Security update for mutt

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mutt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

Mandrake Security Advisory MDVSA-2009:217-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory MDVSA-2009:217-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SLES10: Security update for OpenLDAP2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-meta openldap2-back-perl openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server...

Mandrake Security Advisory MDVSA-2009:217-2 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory MDVSA-2009:217-2. OpenVAS Vulnerability Test $Id: mdksa20092172.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:217-2 mozilla-thunderbird Authors: Thomas Reinke...

SLES10: Security update for OpenLDAP2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-meta openldap2-back-perl openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server...

Mandrake Security Advisory MDVSA-2009:217-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory MDVSA-2009:217-1. OpenVAS Vulnerability Test $Id: mdksa20092171.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:217-1 mozilla-thunderbird Authors: Thomas Reinke...

SLES9: Security update for mutt

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mutt For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5058752 within the SuSE...

mozilla-thunderbird多个安全漏洞

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:217-1 http://www.mandriva.com/security/ Package : mozilla-thunderbird Date : August 23, 2009 Affected: 2009.1 Problem Description: A number of security vulnerabilities have...

openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE 10 Security Update : mutt (mutt-6487)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-6487. The text description of this plugin ...

openSUSE 10 Security Update : libfreebl3 (libfreebl3-6494)

The Mozilla NSS and dependend libraries were updated to fix various issues. CVE-2009-2404 / MFSA 2009-43 : Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Insta...