nss security update

CentOS Errata and Security Advisory CESA-2014:1073 Updated nss, nss-util, and nss-softokn packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact...

Low: Red Hat Security Advisory: nss, nss-util, nss-softokn security, bug fix, and enhancement update

Updated nss, nss-util, and nss-softokn packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base...

nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45)

It was found that the implementation of Internationalizing Domain Names in Applications IDNA hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid...

Incorrect IDNA domain name matching for wildcard certificates — Mozilla

Security researcher Christian Heimes reported that the Network Security Services NSS library does not handle IDNA domain prefixes according to RFC 6125 for wildcard certificates. This leads to improper wildcard matching of domains when they should not be matched in compliance with the...

UBUNTU-CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

CVE-2012-4516

CVE-2012-4516 affects librdmacm 1.0.16 where ibacm.port is not specified and the service connects to port 6125, enabling a remote attacker to influence the application’s address resolution via a malicious ib_acm service. Public records in multiple advisories note the fix in librdmacm 1.0.17 and a...

CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

PT-2012-5454 · Openfabrics Alliance +2 · Librdmacm +2

Name of the Vulnerable Software and Affected Versions: librdmacm version 1.0.16 Description: The issue allows remote attackers to specify address resolution information for the application via a malicious ib acm service when ibacm.port is not specified, causing librdmacm to connect to port 6125...

Windows OS Version Information

Binary data 6125.prm...

CVE-2008-6125

CVE-2008-6125 affects Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3. It is described as an unspecified vulnerability in the user editing interface that allows remote authenticated users to gain privileges via unknown vectors. The NVD listing provides CVSSv2 base score 6.5 (MEDIUM) with net...

CVE-2007-6125

CVE-2007-6125 is a SQL injection vulnerability in the Softbiz Freelancers Script 1, exploitable via the sb_protype parameter in search_form.php. The issue allows remote attackers to execute arbitrary SQL commands; impact vectors are stated as partial confidentiality, integrity, and availability. ...

CVE-2006-6125

NetGear WG311v1 wireless adapter is affected by a heap-based buffer overflow in the WG311ND5.SYS driver (version 2.3.1.10) when processing the SSID in 802.11 management frames. The vulnerability may allow an attacker within radio range to execute arbitrary code or cause a denial-of-service by sen...

NetGear wireless driver fails to properly process specially-crafted 802.11 management frames

Overview A buffer overflow vulnerability exists in the Netgear WG311ND5.SYS wireless driver. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, or cause a denial-of-service condition. Description The WG311ND5.SYS driver is a wireless 802.11g device driv...