777 matches found
OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows remote attackers to affect availability via unknown vectors related to Security...
OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows remote attackers to affect availability via unknown vectors related to Security...
Ubuntu 11.04 / 11.10 : icedtea-web regression (USN-1505-2)
USN-1505-1 fixed vulnerabilities in OpenJDK 6. As part of the update, IcedTea-Web packages were upgraded to a new version. That upgrade introduced a regression which prevented the IcedTea-Web plugin from working with the Chromium web browser in Ubuntu 11.04 and Ubuntu 11.10. This update fixes the...
Scientific Linux Security Update : curl on SL5.x i386/x86_64
Wesley Miaw discovered that when deflate compression was used, libcurl could call the registered write callback function with data exceeding the documented limit. A malicious server could use this flaw to crash an application using libcurl or, potentially, execute arbitrary code. Note: This issue...
Scientific Linux Security Update : openssl on SL5.x i386/x86_64
CVE-2009-0590 openssl: ASN1 printing crash CVE-2009-1377 OpenSSL: DTLS epoch record buffer memory DoS CVE-2009-1378 OpenSSL: DTLS fragment handling memory DoS CVE-2009-1379 OpenSSL: DTLS pointer use-after-free flaw DoS CVE-2009-1386 openssl: DTLS NULL deref crash on early ChangeCipherSpec request...
Scientific Linux Security Update : gnutls on SL4.x, SL5.x i386/x86_64
CVE-2009-3555 TLS: MITM attacks via session renegotiation CVE-2010-0731 gnutls: gnutlsx509crtgetserial incorrect serial decoding from ASN1 BE64 GNUTLS-SA-2010-1 A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handled session renegotiation. A...
Scientific Linux Security Update : openssl on SL6.x i386/x86_64
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength, general purpose cryptography library. An uninitialized variable use flaw was found in OpenSSL. This flaw could cause an application using the OpenSSL...
RedHat Update for java-1.7.0-openjdk RHSA-2012:1009-01
Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.7.0-openjdk RHSA-2012:1009-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
RHEL 6 : java-1.7.0-openjdk (RHSA-2012:1009)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1009 advisory. These packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit. Multiple flaws were discovered in...
RHEL 5 : java-1.6.0-openjdk (RHSA-2012:0730)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0730 advisory. - OpenJDK: improper protection of CORBA data models CORBA, 7079902 CVE-2012-1711 - OpenJDK: fontmanager layout lookup code memory corruption...
OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows remote attackers to affect availability via unknown vectors related to Security...
Critical: Red Hat Security Advisory: java-1.6.0-openjdk security update
Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Microsoft .NET Framework CRL参数解析漏洞 (MS12-025)
BUGTRAQ ID: 52921 CVE ID: CVE-2012-0163 ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET Framework在处理传递到函数的某些参数时，.NET CRL Common Language Runtime中存在错误，可通过特制的网页利用，导致控制用户系统。 0 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x Microsoft .NET Framework 2.x Microsoft .NET Framework 1.x...
Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)
This host is missing a critical security update according to Microsoft Bulletin MS12-025. OpenVAS Vulnerability Test $Id: secpodms12-025.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2671605 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...
Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)
This host is missing a critical security update according to Microsoft Bulletin MS11-086. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows活动目录LDAPS身份验证绕过漏洞(MS11-086)
CVE ID: CVE-2011-2014 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用绕过安全限制。 此漏洞源于由于无法根据CRL验证与域账号相关的SSL证书的撤销状态，活动目录在配置为使用LDAP over SSL（非默认设置）时存在错误。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft Windows...
RHEL 6 : openssl (RHSA-2011:1409)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1409 advisory. - openssl: CRL verification vulnerability CVE-2011-3207 Note that Nessus has not tested for this issue but has instead relied only on the application...
openssl: CRL verification vulnerability
crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...
Moderate: Red Hat Security Advisory: openssl security update
Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
