RHEL 4 / 5 : thunderbird (RHSA-2007:0723)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws wer...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:0722-01 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:0722 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way...

CVE-2007-3738

CVE-2007-3738 : The initial entry notes multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allowing remote code execution through a crafted XPCNativeWrapper. Connected Nessus entries reference this CVE among SeaMonkey/Firefox-related advisories, but the provided documents do n...

Xerox WorkCentre Multiple OpenSSL Vulnerabilities (XRX07-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly suffers from multiple issues in the ESS / Network Controller that could allow remote execution of arbitrary code on the affected device, initiation of denial of service attacks, and...

Unfixed XSS vulnerability at audiobooksupport.helpserve.com

Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting audiobooksupport.helpserve.com, which at the time of submission ranked 3738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It...

Mandrake Linux Security Advisory : openssl (MDKSA-2006:172-1)

Dr S N Henson of the OpenSSL core team and Open Network Security recently developed an ASN1 test suite for NISCC www.niscc.gov.uk. When the test suite was run against OpenSSL two denial of service vulnerabilities were discovered. During the parsing of certain invalid ASN1 structures an error...

Important openssl security update

0.9.7a-43.14 - fix CVE-2006-2937 - mishandled error on ASN.1 parsing 207276 - fix CVE-2006-2940 - parasitic public keys DoS 207274 - fix CVE-2006-3738 - buffer overflow in SSLgetsharedciphers 206940 - fix CVE-2006-4343 - sslv2 client DoS 206940 0.9.7a-43.11 - fix CVE-2006-4339 - prevent attack on...

Important openssl security update

0.9.7a-43.14 - fix CVE-2006-2937 - mishandled error on ASN.1 parsing 207276 - fix CVE-2006-2940 - parasitic public keys DoS 207274 - fix CVE-2006-3738 - buffer overflow in SSLgetsharedciphers 206940 - fix CVE-2006-4343 - sslv2 client DoS 206940 0.9.7a-43.11 - fix CVE-2006-4339 - prevent attack on...

[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1195-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 10, 2006 - ------------------------------------------------------------------------ Package : openssl096...

[slackware-security] openssl

New openssl packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2937 https://vulners.com/cve/CVE-2006-3738...

USN-353-1: openssl vulnerabilities

Dr. Henson of the OpenSSL core team and Open Network Security discovered a mishandled error condition in the ASN.1 parser. By sending specially crafted packet data, a remote attacker could exploit this to trigger an infinite loop, which would render the service unusable and consume all available...

CVE-2006-3738

Buffer overflow in the SSLgetsharedciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers...

CVE-2006-3738

Buffer overflow in the SSLgetsharedciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers...

FreeBSD-SA-06:23.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:23.openssl Security Advisory The FreeBSD Project Topic: Multiple problems in crypto3 Category: contrib Module: openssl Announced: 2006-09-28 Credits: Dr S N...

Ipswitch IMail Server RCPT String Remote Overflow

Binary data 3738.prm...

Solaris 10 (sparc) : 121229-02

SunOS 5.10: libssl patch. Date this patch was last updated by Sun : Apr/23/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 121230-02

SunOS 5.10x86: libssl patch. Date this patch was last updated by Sun : Apr/23/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 9 (sparc) : 113713-30

SunOS 5.9: pkg utilities Patch. Date this patch was last updated by Sun : Apr/05/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...