SOL1618 - Multiple SNMP vulnerabilities CA-2002-03

Information about this advisory is available at the following location:...

CA Unicenter privilege escalation

No description provided...

CA UniCenter Management Portal Username Enumeration Vulnerability

CA UniCenter Management Portal Username Enumeration Vulnerability Package: CA UniCenter Management Portal Vendor Web Site: http://www.ca.com Versions: UniCenter Management Portal 2.0 and 3.1 Platform: Windows Local: No Remote: Yes Fix Available: Yes Advisory Author: Thomas Adams...

CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

CVE-2002-1407

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack...

CVE-2004-0758

Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid...

CA eTrust SCM Detection

Binary data 4534.prm...

CVE-2004-0758

Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid...

CVE-2004-0758

CVE-2004-0758 affects Mozilla 1.5 through 1.7. A CA certificate can be imported even when its distinguished name (DN) matches the built‑in CA root certificate, which allows remote attackers to cause a denial of service on SSL pages because the malicious certificate is treated as invalid. The Open...

RHEL 2.1 : up2date (RHSA-2003:268)

New versions of the up2date and rhnregister clients are available and are required for continued access to Red Hat Network. The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. This erratum includes an updated RHNS-CA-CERT file,...

RHEL 2.1 : up2date (RHSA-2003:177)

Updated versions of the rhnregister and up2date packages are now available. The new packages include many bug fixes, and a few new features. The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates...

mozilla -- built-in CA certificates may be overridden

Under some situations, Mozilla will automatically import a certificate from an email message or web site. This behavior can be used as a denial-of-service attack: if the certificate has a distinguished name DN identical to one of the built-in Certificate Authorities CAs, then Mozilla will no long...

SOL3066 - OpenSSH buffer management vulnerability - CA-2003-24

For information about this vulnerability, refer to...

CA Unicenter TNG buffer overflow

Few network services are vulnerable to stack overflow...

CVE-2003-0996

CVE-2003-0996 concerns an unknown “System Security Vulnerability” in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 that could allow a local attacker to gain privileges via the help interface. The NVD entry assigns a CVSSv2 base score of 4.6 (MEDIUM) with LOCAL attack vector and part...

CVE-2003-0998

Technical details about CVE-2003-0998 are not publicly provided in the connected documents. No affected versions, root cause, or remediation are specified here. Monitor for updates in case new details are released.

CVE-2003-0997

CVE-2003-0997 refers to an unknown denial-of-service flaw in Computer Associates’ Unicenter Remote Control (URC) 6.0. The vulnerability allows an attacker to trigger CPU consumption in the URC host service, potentially impacting availability. Public detail is limited in the provided documents; a ...

Internet explorer (and others) CA certificate attack

For intermediate CA only signature is checked, missed check for basic constaint allows to use any valid certificate as CA certificate...

CA Unicenter password recovery

It's possible to recover original password...

(RHSA-2003:177) Updated up2date and rhn_register clients available

The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates improvements in handling package dependencies and "obsoletes" processing, along with many other bug fixes. This release also includes an updated...