Gentoo Security Advisory GLSA 200912-01 (openssl)

The remote host is missing updates announced in advisory GLSA 200912-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora Core 10 FEDORA-2009-12604 (httpd)

The remote host is missing an update to httpd announced via advisory FEDORA-2009-12604. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 12 FEDORA-2009-12968 (nss-util)

The remote host is missing an update to nss-util announced via advisory FEDORA-2009-12968. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 12 FEDORA-2009-12968 (nss-util)

The remote host is missing an update to nss-util announced via advisory FEDORA-2009-12968. OpenVAS Vulnerability Test $Id: fcore200912968.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12968 nss-util Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 10 FEDORA-2009-12604 (httpd)

The remote host is missing an update to httpd announced via advisory FEDORA-2009-12604. OpenVAS Vulnerability Test $Id: fcore200912604.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12604 httpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 10 : httpd-2.2.14-1.fc10 (2009-12604)

This update contains the latest stable release of Apache httpd. Three security fixes are included, along with several minor bug fixes. A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could u...

Fedora 12 : nss-util-3.12.5-1.fc12.1 (2009-12968)

Update to 3.12.5 This update fixes the following security flaw: CVE-2009-3555 TLS: MITM attacks via session renegotiation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Core 11 FEDORA-2009-12782 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12782. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-12775 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12775. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Security Advisory (FreeBSD-SA-09:15.ssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:15.ssl.asc ADV FreeBSD-SA-09:15.ssl.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:15.ssl.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Security Advisory MDVSA-2009:323 (apache)

The remote host is missing an update to apache announced via advisory MDVSA-2009:323. OpenVAS Vulnerability Test $Id: mdksa2009323.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:323 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Fedora Core 12 FEDORA-2009-12750 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12750. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Security Advisory (FreeBSD-SA-09:15.ssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:15.ssl.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SuSE Security Advisory SUSE-SA:2009:057 (openssl)

The remote host is missing updates announced in advisory SUSE-SA:2009:057. OpenVAS Vulnerability Test $Id: susesa2009057.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:057 openssl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SLES9: Security update for OpenSSL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssl openssl-devel openssl-doc For more information, please visit the referenced security advisories. More details may also be found by searching for...

USN-860-1: Apache vulnerabilities

Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a machine-in-the-middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. The flaw is with TLS renegotiation and...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-1554)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-1554)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...