CentOS Update for openssh CESA-2009:1287 centos5 i386

Check for the Version of openssh OpenVAS Vulnerability Test CentOS Update for openssh CESA-2009:1287 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for openssh CESA-2009:1287 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Security Advisory CESA-2009:1287 (openssh)

The remote host is missing updates to openssh announced in advisory CESA-2009:1287. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Security Advisory RHSA-2009:1287

The remote host is missing updates announced in advisory RHSA-2009:1287. OpenSSH is OpenBSD's SSH Secure Shell protocol implementation. These packages include the core files necessary for both the OpenSSH client and server. A flaw was found in the SSH protocol. An attacker able to perform a...

Solaris 10 (sparc) : 140774-03

SunOS 5.10: sshd patch. Date this patch was last updated by Sun : Mar/19/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Check Point Response to CVE-2008-5161 - OpenSSH CBC mode information disclosure vulnerability

Cause This weakness could allow an attacker who is able to inject arbitrary data into an SSH session to recover up to 32 bits 4 bytes of data by causing an error condition. This attack method causes the SSH session to terminate and therefore cannot be used to obtain arbitrary amounts of data from...

CVE-2008-5161

Error handling in the SSH protocol in 1 SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1;...

CVE-2008-5161

CVE-2008-5161 is an SSH CBC-mode CBC vulnerability where error handling in CBC-based ciphers could allow remote attackers to recover plaintext from arbitrary SSH ciphertext blocks. The vulnerability affects multiple SSH implementations including OpenSSH 4.7p1 and various SSH clients/servers (as l...

CVE-2007-5161

CVE-2007-5161 describes a cross-zone scripting vulnerability in the internal browser of the i-Systems Feedreader 3.10. The issue allows remote attackers to inject arbitrary web script or HTML via an item in a feed, demonstrated by a WordPress blog update. The vulnerability stems from how the inte...

Solaris 9 (x86) : 122301-61

SunOS 5.9x86: Kernel Patch. Date this patch was last updated by Sun : Nov/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 122300-61

SunOS 5.9: Kernel Patch. Date this patch was last updated by Sun : Nov/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2006-5161

IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page...

CVE-2006-5161

The CVE concerns IBM Client Security Password Manager, where saved passwords are distributed based on the title of a website. The underlying issue is a trust/validation weakness: an attacker can obtain credentials by altering the HTML page title, effectively steering the manager to reveal usernam...