Oracle Linux 3 : seamonkey (ELSA-2009-1432)

From Red Hat Security Advisory 2009:1432 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser,...

CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client

The OpenSSL::SSL.verifycertificateidentity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows...

CVE-2013-2408

Technical details (affected software, exact vulnerability class, exploitability, affected versions) for CVE-2013-2408 are not publicly provided in the supplied documents. Monitor for updates.

SuSE 11 Security Update : Mozilla (SAT Patch Number 1304)

Mozilla Thunderbird was updated to version 2.0.0.23. The release fixes one security issue: MFSA 2009-42 / CVE-2009-2408: IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities CA which...

RealNetworks RealPlayer Multiple Vulnerabilities - Sep12 (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnsep12macosx.nasl 6022 2017-04-25 12:51:04Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities - Sep12 Mac OS X Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2408

CVE-2012-2408: RealPlayer’s AAC SDK in RealPlayer (and RealPlayer SP) before the listed fixed versions contains a vulnerability in decoding crafted AAC files that can cause heap memory corruption and a denial of service. Affected products include RealPlayer before 15.0.6.14 (Windows), RealPlayer ...

Real Networks RealPlayer < 15.0.6.14 Multiple Vulnerabilities

Binary data 6574.prm...

RealPlayer for Windows < 15.0.6.14 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.6.14. As such, it is affected by multiple vulnerabilities : - A buffer overflow error exists related to 'AAC' handling, specifically unpacking of the stream data. CVE-2012-2407 - A...

[security bulletin] HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02937744 Version: 1 HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon...

CVE-2011-2408

CVE-2011-2408 affects HP webOS 3.x, specifically the Contacts application, where an XSS vulnerability exists in the Contacts UI before version 3.0.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. HP security bulletin HPSBGN02694 rev.1 notes affec...

CVE-2011-2408

Cross-site scripting XSS vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CentOS Update for seamonkey CESA-2009:1432 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-2408

CVE-2010-2408 affects Oracle iRecruitment (OA.jsp) in Oracle E-Business Suite deployments (11.5.10.2, 12.0.6, 12.1.3). The connected advisory describes a web URL redirection vulnerability that can redirect a user to a malicious site after logout via the p_home_url parameter. This is a persistent ...

SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 6598)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

OpenLDAP: Doesn't properly handle NULL character in subject Common Name

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

Design/Logic Flaw

istream.c in w3m 0.5.2 and possibly other versions, when sslverifyserver is enabled, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...

Design/Logic Flaw

libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification...

Mandriva Update for kdelibs4 MDVSA-2010:028 (kdelibs4)

Check for the Version of kdelibs4 OpenVAS Vulnerability Test Mandriva Update for kdelibs4 MDVSA-2010:028 kdelibs4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kdelibs4 MDVSA-2010:028 (kdelibs4)

Check for the Version of kdelibs4 OpenVAS Vulnerability Test Mandriva Update for kdelibs4 MDVSA-2010:028 kdelibs4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for sendmail MDVSA-2010:003 (sendmail)

Check for the Version of sendmail OpenVAS Vulnerability Test Mandriva Update for sendmail MDVSA-2010:003 sendmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...