132 matches found
FreeBSD : OpenSSL -- Multiple vulnerabilities (5a668ab3-8d86-11eb-b8d6-d4c9ef517024)
The OpenSSL project reports : High: CA certificate check bypass with X509VFLAGX509STRICT CVE-2021-3450The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. High: NULL pointer deref in signaturealgorithms...
OpenSSL: CA Certificate Check Bypass Vulnerability (CVE-2021-3450) - Windows
OpenSSL is prone to a CA certificate check bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
OpenSSL: CA Certificate Check Bypass Vulnerability (CVE-2021-3450) - Linux
OpenSSL is prone to a CA certificate check bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
OpenSSL -- Multiple vulnerabilities
The OpenSSL project reports: High: CA certificate check bypass with X509VFLAGX509STRICT CVE-2021-3450The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. High: NULL pointer deref in signaturealgorithms...
CVE-2020-2021
When Security Assertion Markup Language SAML authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled unchecked, improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected resources...
PT-2020-6927 · Unknown +4 · Openconnect +4
Name of the Vulnerable Software and Affected Versions: OpenConnect versions prior to 8.08 Description: The issue is related to the mishandling of negative return values from X509 check function calls, which could assist attackers in performing man-in-the-middle attacks. This vulnerability is...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
PT-2018-13950 · Postman · Postman
Name of the Vulnerable Software and Affected Versions: Postman versions through 6.3.0 Description: An information-disclosure issue was discovered in Postman. It validates a server's X.509 certificate and presents an error if the certificate is not valid. Unfortunately, the associated HTTPS reques...
Win CE Schannel cert wildcard matches too much
curl's TLS server certificate checks are flawed on Windows CE. This vulnerability occurs in the verify certificate function when comparing a wildcard certificate name as returned by the Windows API function CertGetNameString to the hostname used to make the connection to the server. The...
Scientific Linux Security Update : curl on SL7.x x86_64 (20161103)
Security Fixes : - It was found that the libcurl library did not prevent TLS session resumption when the client certificate had changed. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client...
Medium: curl
Issue Overview: curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session. CVE-2016-5419 curl and libcurl before 7.50.1 do not check the client certificate when...
mysql: ssl-validate-cert incorrect hostname check
It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client...
Elastic Logstash insufficient certificate check
man-in-the-middle attack is possible...
SUSE-SU-2015:1013-1 Security update for wpa_supplicant
wpasupplicant was updated to fix three security issues: - CVE-2015-0210: wpasupplicant: broken certificate subject check this adds the 'domainmatch' config option from upstream additional to the already existing domainsuffixmatch - CVE-2014-3686: hostapd command execution - CVE-2015-1863: P2P SSI...
getmail security vulnerabilities
Multiple vulnerabilities in certificates check...
Apple iOS multiple security vulnerabilities
Unauthorized bluetooth access, insufficient encryption, insufficient certificate check, information leakage, SSL poodle attack...
libgadu certificate check bypass
Server certificate is not checked...
DEBIAN-CVE-2013-0289
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...