1409 matches found
SSL Server Accepts Weak Diffie-Hellman Keys
The remote SSL/TLS server accepts a weak Diffie-Hellman DH public key value. This flaw may aid an attacker in conducting a man-in-the-middle MiTM attack against the remote server since it could enable a forced calculation of a fully predictable Diffie-Hellman secret. By itself, this flaw is not...
CentOS Update for firefox CESA-2010:0782 centos4 i386
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2010:0782 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Debian DSA-2123-1 : nss - several vulnerabilities
Several vulnerabilities have been discovered in Mozilla's Network Security Services NSS library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3170 NSS recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate,...
BSA-009 Security Update for nss
Alexander Reichle-Schmehl uploaded new packages for nss which fixed the following security problems: CVE-2010-3170 NSS recognizes a wildcard IP address in the subjects Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a...
BSA-009 Security Update for nss
Alexander Reichle-Schmehl uploaded new packages for nss which fixed the following security problems: CVE-2010-3170 NSS recognizes a wildcard IP address in the subjects Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a...
DSA-2123-1 nss - cryptographic weaknesses
Bulletin has no description...
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:211)
Security issues were identified and fixed in mozilla-thunderbird : The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral...
Mozilla Foundation Security Advisory 2010-72
Mozilla Foundation Security Advisory 2010-72 Title: Insecure Diffie-Hellman key exchange Impact: Low Announced: October 19, 2010 Reporter: Nelson Bolyard Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird 3.0.9 SeaMonkey 2.0.9 Descripti...
Ubuntu Update for nss vulnerabilities USN-1007-1
Ubuntu Update for Linux kernel vulnerabilities USN-1007-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10071.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for nss vulnerabilities USN-1007-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
DEBIAN-CVE-2010-3173
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral DHE mode, which makes it easier for remote attackers to defeat...
CVE-2010-3173
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral DHE mode, which makes it easier for remote attackers to defeat...
FreeBSD : mozilla -- multiple vulnerabilities (c4f067b9-dc4a-11df-8e32-000f20797ede)
The Mozilla Project reports : MFSA 2010-64 Miscellaneous memory safety hazards rv:1.9.2.11/ 1.9.1.14 MFSA 2010-65 Buffer overflow and memory corruption using document.write MFSA 2010-66 Use-after-free error in nsBarProp MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter MFSA...
SeaMonkey < 2.0.9 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.0.9. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could lead to memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-64 - By passing an excessively long strin...
Mozilla Thunderbird 3.1 < 3.1.5 Multiple Vulnerabilities
The installed version of Thunderbird 3.1 is earlier than 3.1.5. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could lead to memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-64 - By passing an excessively long...
Firefox 3.6 < 3.6.11 Multiple Vulnerabilities
The installed version of Firefox 3.6 is earlier than 3.6.11. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could lead to memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-64 - By passing an excessively long...
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : nss vulnerabilities (USN-1007-1)
Richard Moore discovered that NSS would sometimes incorrectly match an SSL certificate which had a Common Name that used a wildcard followed by a partial IP address. While it is very unlikely that a Certificate Authority would issue such a certificate, if an attacker were able to perform a...
Firefox < 3.5.14 Multiple Vulnerabilities
The installed version of Firefox is earlier than 3.5.14. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could lead to memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-64 - By passing an excessively long string...
Mozilla Thunderbird 3.0.x < 3.0.9 Multiple Vulnerabilities
Binary data 5683.prm...