Fetchmail NULL字符CA SSL整数验证安全绕过漏洞

Bugraq ID: 35951 Fetchmail是一款功能强大的IMAP和POP客户程序。 Fetchmail不正确验证签名CA证书中包含NULL字符的域名，允许攻击者使用恶意SSL证书替换可信证书，绕过安全检测进行中间人攻击或伪造可信服务器，获得敏感信息。 Fetchmail Fetchmail 6.3.10 Fetchmail Fetchmail 6.3.9 Fetchmail Fetchmail 6.3.8 Fetchmail Fetchmail 6.3.7 Fetchmail Fetchmail 6.3.6 -rc3 Fetchmail Fetchmail 6.3.6 -rc...

Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞

Bugraq ID: 35888 CVE ID：CVE-2009-2408 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox不正确验证签名CA证书中的域名，远程攻击者可以利用漏洞通过伪造证书进行中间人攻击。 如果构建的一个恶意证书其公用名包含NULL字符，并能正确获得合法签名被浏览器信任，那么攻击者可以使用这个证书代替合法证书进行中间人攻击，获得敏感信息或进行其他攻击。 Mozilla Network Security Services NSS 3.12.2 Mozilla Network Security Services NSS 3.11...

CA ARCserve Backup Message Engine Denial of Service (CVE-2009-1761)

Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A denial of service vulnerability exists in CA ARCserve Backup Message Engine. The vulnerability exists in CA ARCserve Message Engine. The vulnerability is due to insufficient...

Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability. CVE-2009-2408. Remote exploit for linux platform source: http://www.securityfocus.com/bid/35888/info Mozilla Network Security Services NSS is prone to a security-bypass vulnerability because it fails to proper...

Design/Logic Flaw

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service crash via 1 an invalid 0x13 message, which is not properly handled in the ASCORE module, or 2 a 0x3B message with invalid stub data that triggers an RPC marshalling error...

CVE-2009-1761

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service crash via 1 an invalid 0x13 message, which is not properly handled in the ASCORE module, or 2 a 0x3B message with invalid stub data that triggers an RPC marshalling error...

CVE-2009-1761

The CVE-2009-1761 issue affects CA ARCserve Backup on Windows (r12.0 and r12.0 SP1) where the Message Engine crashes due to insufficient verification of RPC data. An unauthenticated remote attacker can send malformed RPC messages to trigger a denial of service. A patch (RO08383) and guidance from...

CVE-2009-1761

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service crash via 1 an invalid 0x13 message, which is not properly handled in the ASCORE module, or 2 a 0x3B message with invalid stub data that triggers an RPC marshalling error...

[Full-disclosure] [IVIZ-09-003] CA ARCserve Denial of Service

----------------------------------------------------------------------- ------ iViZ Security Advisory 09-003 16/06/2009 ----------------------------------------------------------------------- ------ iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

[Full-disclosure] [IVIZ-09-004] CA ARCserve Denial of Service

----------------------------------------------------------------------- iViZ Security Advisory 09-004 16/06/2009 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. ...

[Full-disclosure] CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities CA Advisory Reference: CA20090615-01 CA Advisory Date: 2009-06-15 Reported By: iViZ Security Research Team Impact: A remote attacker can cause a denial of servic...

CA ARCserve Backup DoS

Crash on malfrmed TCP/6503 RPC messages parsing...

OpenSSL CA Certificate Security Bypass Vulnerability

OpenSSL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

CVE-2009-0653

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

Sql injection

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

CVE-2009-0653

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

CVE-2009-0653

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

CVE-2009-0653

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

Fedora Core 10 FEDORA-2009-1291 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1291. OpenVAS Vulnerability Test $Id: fcore20091291.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1291 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 9 : nss-3.12.2.0-2.fc9 (2009-1276)

This updates adds protection against rogue CA that was generated as a proof-of- concept of the MD5 collision attacks against X509 signatures: http://www.win.tue.nl/hashclash/rogue-ca/ , related to CVE-2004-2761. Note that Tenable Network Security has extracted the preceding description block...