SuSE Update for ca-certificates-mozilla openSUSE-SU-2013:1870-1 (ca-certificates-mozilla)

Check for the Version of ca-certificates-mozilla OpenVAS Vulnerability Test $Id: gbsuse201318701.nasl 8672 2018-02-05 16:39:18Z teissa $ SuSE Update for ca-certificates-mozilla openSUSE-SU-2013:1870-1 ca-certificates-mozilla Authors: System Generated Check Copyright: Copyright C 2013 Greenbone...

cURL library -- cert name check ignore with GnuTLS

cURL project reports: libcurl is vulnerable to a case of missing out the checking of the certificate CN or SAN name field when the digital signature verification is turned off. libcurl offers two separate and independent options for verifying a server's TLS certificate. CURLOPTSSLVERIFYPEER and...

openSUSE: Security Advisory for ca-certificates-mozilla (openSUSE-SU-2013:1870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ca-certificates-mozilla (openSUSE-SU-2013:1891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

FreeBSD : PHP5 -- memory corruption in openssl_x509_parse() (47b4e713-6513-11e3-868f-0025905a4771)

Stefan Esser reports : The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

SeaMonkey < 2.23 Multiple Vulnerabilities

Binary data 8072.prm...

Mozilla Thunderbird < 24.2 Multiple Vulnerabilities

Binary data 8071.prm...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

PHP5 -- memory corruption in openssl_x509_parse()

Stefan Esser reports: The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

Design/Logic Flaw

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements...

CVE-2013-6986

The CVE-2013-6986 issue affects ZippyYum Subway CA Kiosk iOS app (3.4). The vulnerability stems from cleartext storage of sensitive data in SQLite cache files (Cache.db / Cache.db-wal) under ../Caches/com.ZippyYum.SubwayOC/, allowing local attackers with access to read unencrypted data. Exposed e...

CVE-2013-6986: Undefined Security Weakness

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements...

Microsoft Digital Certificates Security Advisory (2916652)

This host is missing an important security update according to Microsoft advisory 2916652. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2916652.nasl 5347 2017-02-19 09:15:55Z cfi $ Microsoft Digital Certificates Security Advisory 2916652 Authors: Shashi Kiran N Copyright: Copyright ...

Microsoft Digital Certificates Security Advisory (2916652)

This host is missing an important security update according to Microsoft advisory 2916652. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-5968

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

Cross site scripting

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

CVE-2013-5968

CVE-2013-5968 is a cross-site scripting (XSS) vulnerability affecting CA SiteMinder 12.0–12.51 and SiteMinder 6 Web Agents. The issue allows remote attackers to inject arbitrary script or HTML via vectors involving the double-quote character. The NVD entry lists a Medium severity (CVSSv2 base sco...

CVE-2013-5968

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

CVE-2013-5968: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...