[SECURITY] [DSA 2541-1] beaker security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2541-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 07, 2012 http://www.debian.org/security/faq -...

DSA-2541-1 beaker - information disclosure

Bulletin has no description...

PT-2012-2871 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The issue concerns the use of a hardcoded password in the rc4encrypt function, makin...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2007-207-01)

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix security issues. The first issue which allows remote attackers to make recursive queries only affects Slackware 12.0. More details about this issue may be found in the Common Vulnerabilities and...

Debian DSA-1888-1 : openssl, openssl097 - cryptographic weakness

Certificates with MD2 hash signatures are no longer accepted by OpenSSL, since they're no longer considered cryptographically secure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1888...

Debian DSA-1946-1 : belpic - cryptographic weakness

It was discovered that belpic, the belgian eID PKCS11 library, does not properly check the result of an OpenSSL function for verifying cryptographic signatures, which could be used to bypass the certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Apple iPhone cryptographic weakness

Certificate key usage is not checked during validation of .mobileconfig wireless autoconfiguration file...

[SECURITY] [DSA 1946-1] New belpic packages fix cryptographic weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1946-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 04, 2009 http://www.debian.org/security/faq -...

DSA-1946-1 belpic - cryptographic weakness

Bulletin has no description...

Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200)

Title: Crypto backdoor in Qnap storage devices Date: 18 September 2009 URL: http://www.baseline-security.de/downloads/BSC-QnapCryptoBackdoor-CVE-2009-3200.txt Vendor: QNAP Systems Products verified: TS-239 Pro, TS-639 Pro Products unverified: SS-439 Pro, TS-439 Pro, TS-439U-SP/RP, TS-509 Pro,...

QNAP Systems Encryption Bypass

Title: Crypto backdoor in Qnap storage devices Date: 18 September 2009 URL: http://www.baseline-security.de/downloads/BSC-QnapCryptoBackdoor-CVE-2009-3200.txt Vendor: QNAP Systems Products verified: TS-239 Pro, TS-639 Pro Products unverified: SS-439 Pro, TS-439 Pro, TS-439U-SP/RP, TS-509 Pro,...

[SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures

------------------------------------------------------------------------ Debian Security Advisory DSA-1888-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 15, 2009 http://www.debian.org/security/faq -...

DTSA-185-1 slurm-llnl - cryptographic weakness

Bulletin has no description...

DSA-1703-1 bind9 - cryptographic weakness

Bulletin has no description...

DSA-1701-1 openssl openssl097 - cryptographic weakness

Bulletin has no description...

OpenSSH cryptographic weakness

With low probability it's possible to recover few bits of plaintext...

Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Joomla Weak Random Password Reset Token Vulnerability Release Date: 2008/09/11 Last Modified: 2008/09/11 Author: Stefan Esser stefan.esseratsektioneins.de Application: Joomla = 1.5....

Debian: Security Advisory (DSA-273)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-269-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 266-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 266-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...