107 matches found
RedHat Update for openssl RHSA-2012:0059-01
Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2012:0059-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[security bulletin] HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access to Data, Unauthorized Disclosure of Information Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03315912 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03315912 Version: 1 HPSBMU02776...
Fedora Update for openssl FEDORA-2012-0232
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Gentoo Security Advisory GLSA 201203-12 (openssl)
The remote host is missing updates announced in advisory GLSA 201203-12. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes multiple security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Debian Security Advisory DSA 2390-1 (openssl)
The remote host is missing an update to openssl announced via advisory DSA 2390-1. OpenVAS Vulnerability Test $Id: deb23901.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2390-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
CentOS 6 : openssl (CESA-2012:0059)
Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
RedHat Update for openssl RHSA-2012:0060-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
openssl security update
0.9.8e-20.1 - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes 771770 - fix for CVE-2011-4109 - double free in policy checks 771771 - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding 771775 - fix for CVE-2011-4619 - SGC restart DoS attac...
OpenSSL -- DTLS Denial of Service
The OpenSSL Team reports: A flaw in the fix to CVE-2011-4108 can be exploited in a denial of service attack. Only DTLS applications using OpenSSL 1.0.0f and 0.9.8s are affected...
SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 5635)
Various security vulnerabilities have been fixed in OpenSSL : - DTLS plaintext recovery attack. CVE-2011-4108 - double-free in Policy Checks. CVE-2011-4109 - uninitialized SSL 3.0 padding. CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures. CVE-2011-4577 - SGC restart DoS attack...
[SECURITY] [DSA 2390-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2390-1 [email protected] http://www.debian.org/security/ Florian Weimer January 15, 2012 http://www.debian.org/security/faq -...
CVE-2011-4108
The CVE-2011-4108 issue concerns the DTLS implementation in OpenSSL. Affected versions are OpenSSL before 0.9.8s and OpenSSL 1.x before 1.0.0f, where a MAC check is performed only if certain padding is valid, enabling a padding oracle that can aid plaintext recovery. This is explicitly described ...
ABBS Electronic Flash Cards 2.1 Buffer Overflow
Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the fcd file, and booom calc pops up Tested on: Win XP SP3...
HP-UX Update for Threaded Processes HPSBUX02611
The remote host is missing an update for the Threaded Processes packages announced via the referenced advisory. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2010-4108
CVE-2010-4108 affects HP-UX running threaded processes on HP-UX B.11.11, B.11.23 and B.11.31. Root cause: HP-UX does not properly support threaded processes, enabling a remote attacker with authentication to cause a Denial of Service via unspecified vectors. Impact per cited sources: remote DoS w...
CVE-2009-4108
XM Easy Personal FTP Server 5.8.0 is vulnerable to a denial-of-service condition: remote authenticated users can crash the server by uploading or creating a large number of files or directories and then issuing a LIST command. OpenVAS entries corroborate the DoS via file/folder handling in this s...
CVE-2009-4108
creationtimestamp| type| source ---|---|--- 2009-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10104 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10221...
CVE-2008-4108
The CVE-2008-4108 entry concerns Tools/faqwiz/move-faqwiz.sh (the generic FAQ wizard moving tool) in Python 2.4.5, where a local attacker could cause a symlink attack on a temporary file (tmp$RANDOM.tmp) to overwrite arbitrary files. According to the NVD/mitigations notes, this is a local vulnera...
