Symantec Mail Security for Exchange / Domino Decomposer Engine Multiple Vulnerabilities (SYM16-010)

The version of Symantec Mail Security for Exchange or Domino installed on the remote Windows host is affected by multiple vulnerabilities in the decomposer engine : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...

CVE-2016-3644

CVE-2016-3644 is a vulnerability in the Norton/Symantec decomposer/mime-parsing path (CMIMEParser::UpdateHeader) that can be triggered by specially crafted MIME data, potentially leading to memory corruption, a denial of service, or arbitrary code execution. The linked Nessus/OpenVAS entries tie ...

Symantec Messaging Gateway 10.x < 10.6.1-4 Multiple Vulnerabilities (SYM16-010)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.6.1-4. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp...

Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP5 Multiple Vulnerabilities (SYM16-010)

The version of Symantec Endpoint Protection Client installed on the remote host is 12.1 prior to 12.1 RU6 MP5. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...

CVE-2016-3644

creationtimestamp| type| source ---|---|--- 2016-06-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40034...

Debian DSA-3299-1 : stunnel4 - security update

Johan Olofsson discovered an authentication bypass vulnerability in Stunnel, a program designed to work as an universal SSL tunnel for network daemons. When Stunnel in server mode is used with the redirect option and certificate-based authentication is enabled with 'verify = 2'or higher, then onl...

[SECURITY] [DSA 3299-1] stunnel4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3299-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 02, 2015 https://www.debian.org/security/faq -...

SUSE SLES12 Security Update : stunnel (SUSE-SU-2015:1062-1)

This update fixes an authentication bypass when using the 'redirect' option CVE-2015-3644, bsc931517, backport from v5.17. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2015:1062-1 Security update for stunnel

This update fixes an authentication bypass when using the 'redirect' option CVE-2015-3644, bsc931517, backport from v5.17...

CVE-2015-3644

Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication...

CVE-2015-3644

CVE-2015-3644 affects Stunnel when run in server mode with the redirect option and certificate-based authentication (verify &gt;= 2). The vulnerability causes only the initial connection to be redirected, enabling an authentication bypass. Affected versions include Stunnel 5.00–5.13; the issue is...

CVE-2013-3644

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and Ichitaro JUST School through 2010 allows remote attackers to execute arbitrary code via a crafted...

CVE-2013-3644

CVE-2013-3644 affects JustSystems Ichitaro family (Ichitaro 2006–2013, Ichitaro Pro up to 2, Ichitaro Government 6–7 and 2006–2010, Ichitaro Portable with oreplug, Ichitaro Viewer, and Ichitaro JUST School through 2010). The issue is described as an unspecified vulnerability that may allow remote...

RHEL 5 : flash-plugin (RHSA-2010:0829)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0829 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

CVE-2012-3644

CVE-2012-3644 affects WebKit as used by Safari before version 6.0. The issue involves memory corruption in WebKit when processing a crafted website, which could lead to arbitrary code execution or a crash. Apple’s iOS/Safari security updates (iOS 6 rollout) address this and related WebKit vulnera...

openSUSE Security Update : flash-player (flash-player-3474)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650...

openSUSE Security Update : flash-player (flash-player-3474)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650...

SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

RHEL 6 : flash-plugin (RHSA-2010:0867)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0867 advisory. - flash-plugin: security bulletin APSB10-26 CVE-2010-3636, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,...

Adobe Flash Player Multiple Vulnerabilities (Linux)

This host is installed with Adobe Flash Player and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov10lin.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Flash Player Multiple Vulnerabilities Linux Authors: Sooraj KS Copyright: Copyright...