4680 matches found
PT-2017-18312
Name of the Vulnerable Software and Affected Versions CA Client Automation versions r12.9 through r14.0 SP1 Description The issue allows local users to obtain sensitive information by reading a local file that contains an encrypted password after operating system installation. This occurs because...
CVE-2017-8391
The CVE-2017-8391 entry concerns the OS Installation Management component of CA Client Automation (versions r12.9, r14.0, r14.0 SP1). The root cause is that during operating system installation, an encrypted password is written to a readable local file, allowing a local attacker to read and obtai...
CVE-2017-8391
The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system installation, which allows local users to obtain sensitive information by reading this file after operating system...
SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss, mozilla-nspr (SUSE-SU-2017:1175-1)
Mozilla Firefox was updated to the Firefox ESR release 45.9. Mozilla NSS was updated to support TLS 1.3 close to release draft and various new ciphers, PRFs, Diffie Hellman key agreement and support for more hashes. Security issues fixed in Firefox bsc1035082 - MFSA 2017-11/CVE-2017-5469: Potenti...
Ubuntu: Security Advisory (USN-3270-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS : NSS vulnerabilities (USN-3270-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3270-1 advisory. Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. A remote attacker...
USN-3270-1: NSS vulnerabilities
Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. A remote attacker could possibly use this flaw to obtain clear text data from long encrypted sessions. This update causes NSS to limit use of the same symmetric key...
Fedora 25 : php-pear-CAS (2017-2a90185a04)
Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...
Fedora 24 : php-pear-CAS (2017-d9d620366e)
Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...
CVE-2016-3106
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...
Information disclosure
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...
CVE-2016-3106
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...
CVE-2016-3106: Concurrent Execution using Shared Resource with Improper Synchronization
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...
PT-2017-8336
Name of the Vulnerable Software and Affected Versions Pulp versions prior to 2.8.3 Description The issue arises from the insecure creation of a temporary directory during CA key generation. Recommendations For versions prior to 2.8.3, update to version 2.8.3 or later to resolve the issue...
openSUSE Security Update : nodejs4 (openSUSE-2017-442)
This update for nodejs4 fixes the following issues : - New upstream LTS release 4.7.3 The embedded openssl sources were updated to 1.0.2k CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, bsc1022085, bsc1022086, bsc1009528 - No changes in LTS version 4.7.2 - New upstream LTS release 4.7.1 - build:...
CVE-2015-4680
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates...
Design/Logic Flaw
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates...
CVE-2015-4680
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates...