DSA-3673-2 openssl - regression update

Bulletin has no description...

Ubuntu: Security Advisory (USN-3087-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] openssl

New openssl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssl-1.0.2i-i586-1slack14.2.txz: Upgraded. This update fixes denial-of-service and other security issues. For more...

[SECURITY] [DSA 3673-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3673-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2016 https://www.debian.org/security/faq -...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2i-alt1

Sept. 22, 2016 Gleb Fotengauer-Malinovskiy 1.0.2i-alt1 - Updated to 1.0.2i fixes CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2i-alt1

1.0.2i-alt1 built Sept. 22, 2016 Gleb Fotengauer-Malinovskiy in task 169814 Sept. 22, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.2i fixes CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2i-alt1

Sept. 22, 2016 Gleb Fotengauer-Malinovskiy 1.0.2i-alt1 - Updated to 1.0.2i fixes CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306...

Debian: Security Advisory (DSA-3673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BELL-CVE-2016-6302 CVE-2016-6302 does not affect BellSoft software

Bulletin has no description...

CVE-2016-6302

CVE-2016-6302 affects OpenSSL: an under-specified/under-checked length condition in TLS session ticket handling can cause an out-of-bounds read (DoS) when SHA-512 is used for ticket HMAC. Public details in 2016 advisory set; openssl fixes moved to 1.0.2.i-1 (and newer). Remediation: upgrade OpenS...

CVE-2015-6302

The CVE-2015-6302 issue affects Cisco Wireless LAN Controller (WLC) firmware specifically 7.0(250.0) and 7.0(252.0). The root cause is insufficient input validation in the RADIUS Disconnect-Request handling, enabling an unauthenticated, remote attacker to cause a partial denial-of-service by disc...

CVE-2013-6302

CVE-2013-6302 is a SQL injection vulnerability affecting IBM Algo One as used in MetaData Management Tools (UDS 4.7.0–5.0.0), ACSWeb in Algo Security Access Control Management (4.7.0–4.9.0), and ACSWebApps (5.0.0). The underlying issue allows remote authenticated users to execute arbitrary SQL vi...

CVE-2013-6302

SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified...

TurnkeyForms Local Classifieds Authentication Bypass Vulnerability (Mar 2009) - Active Check

TurnkeyForms Local Classifieds is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2008-6302

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to SiteAdmin/admin.php...

CVE-2008-6302

TurnkeyForms Local Classifieds (CVE-2008-6302) is affected by an authentication bypass in Site_Admin/admin.php, allowing remote attackers to gain administrative access. CVSS v2 base score 7.5 (NETWORK, LOW complexity, no auth). Exploitation references exist (Exploit-DB, X-Force, Secunia, etc.). O...

CVE-2008-6302

creationtimestamp| type| source ---|---|--- 2008-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7106...

Gentoo Security Advisory GLSA 200702-05 (fail2ban)

The remote host is missing updates announced in advisory GLSA 200702-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

ZDI-07-072: Novell Netmail AntiVirus Agent Multiple Overflow Vulnerabilities

ZDI-07-072: Novell NetMail AntiVirus Agent Multiple Heap Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-072.html December 10, 2007 -- CVE ID: CVE-2007-6302 -- Affected Vendor: Novell -- Affected Products: NetMail 3.5.2 -- TippingPointTM IPS Customer Protection:...

CVE-2007-6302

The vulnerability CVE-2007-6302 affects Novell NetMail 3.5.2 (NetMail with AntiVirus agent) via multiple heap-based overflows in avirus.exe. The root cause is that the avirus.exe service reads a user‑supplied ASCII integer as an argument to a memory allocation, then adds to that value without pro...