Gentoo Security Advisory GLSA 201110-05 (gnutls)

The remote host is missing updates announced in advisory GLSA 201110-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Spring Framework表达式语言JSP属性处理信息泄露漏洞(cve-2011-2730)

Bugtraq ID: 49543 CVE ID：CVE-2011-2730 Spring Framework是一个开源的Java／Java EE全功能栈（full-stack）的应用程序框架， 以Apache许可证形式发布，也有.NET平台上的移植版本。 在JSP 2.0之前，表达式语言不被支持。要在基于早期JSP规范的WEB应用程序中使用EL，一些Spring MVC标签提供对Servlet/JSP容易的EL独立支持。默认启用对EL求值。当使用支持EL的容器时，EL中的属性会被求值两次，一次容器另一次为tab。这可导致不可期的敏感信息泄露。 0 SpringSource Spring...

CVE-2011-2730: Spring Framework Information Disclosure

CVE-2011-2730: Spring Framework Information Disclosure Severity: Variable depending on application. Likely to be low to moderate, may be important. Version affected: 3.0.0 to 3.0.5 2.5.0 to 2.5.6.SEC02 community releases 2.5.0 to 2.5.7.SR01 subscription customers Earlier, unsupported versions may...

CentOS Update for gnutls CESA-2009:1232 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft IIS FastCGI请求头远程溢出漏洞（MS10-065）

BUGTRAQ ID: 43138 CVE ID: CVE-2010-2730 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 对于启用了FastCGI功能的IIS服务器，远程攻击者可以通过提交特制的HTTP请求触发缓冲区溢出，导致执行任意代码。 Microsoft IIS 7.5 临时解决方法： 禁用FastCGI。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-065）以及相应补丁: MS10-065：Vulnerabiliti...

CVE-2010-2730

CVE-2010-2730 affects Microsoft Internet Information Services (IIS) 7.5 when FastCGI is enabled. It is a remote code execution vulnerability caused by a heap buffer overflow in the HTTP header processing path exposed when handling crafted request headers, allowing an unauthenticated remote attack...

MS10-065: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)

The version of IIS installed on the remote host has the following vulnerabilities : - Sending a specially crafted request for an ASP page on a website hosted by IIS can result in a denial of service. CVE-2010-1899 - Sending a specially crafted HTTP request to an IIS server with FastCGI enabled ca...

openSUSE Security Update : gnutls (gnutls-1938)

gnutls did not properly handle embedded '\0' characters in x509 certificates. Attackers using specially crafted certificates could exploit that to conduct man-in-the-middle attacks CVE-2009-2730. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandriva Security Advisory MDVSA-2009:308 (gnutls)

The remote host is missing an update to gnutls announced via advisory MDVSA-2009:308. OpenVAS Vulnerability Test $Id: mdksa2009308.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:308 gnutls Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

Debian Security Advisory DSA 1935-1 (gnutls13 gnutls26)

The remote host is missing an update to gnutls13 gnutls26 announced via advisory DSA 1935-1. OpenVAS Vulnerability Test $Id: deb19351.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1935-1 gnutls13 gnutls26 Authors: Thomas Reinke Copyright: Copyright c 2009...

[SECURITY] [DSA 1935-1] New gnutls23/gnutls26 packages fix SSL certificate verification weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA-1935-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano November 17th, 2009 http://www.debian.org/security/faq -...

DSA-1935-1 gnutls13 gnutls26 - SSL certificate

Bulletin has no description...

Slackware 12.1 / 12.2 / 13.0 / current : gnutls (SSA:2009-290-01)

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-290-01. The text itself is...

gnutls

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2730 Here are the details from the Slackware 13.0 ChangeLog...

SLES11: Security update for GnuTLS

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gnutls libgnutls26 More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES9: Security update for GnuTLS

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gnutls gnutls-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5057720...

openSUSE 10 Security Update : gnutls (gnutls-6471)

This update of gnutls improves the verification of the domain/subject names in SSL certificates CVE-2009-2730. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-6471. The text description...

Fedora Core 11 FEDORA-2009-8565 (gnutls)

The remote host is missing an update to gnutls announced via advisory FEDORA-2009-8565. OpenVAS Vulnerability Test $Id: fcore20098565.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8565 gnutls Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-8622 (gnutls)

The remote host is missing an update to gnutls announced via advisory FEDORA-2009-8622. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...