firefox/nss: doesn't handle NULL in Common Name properly

Mozilla Network Security Services NSS before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to...

DEBIAN-CVE-2009-2408

Mozilla Network Security Services NSS before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to...

Sourcefire 3D Sensor / Defense Center Privilege Escalation

Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details --------------------- A privilege escalation vulnerabili...

iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit

No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...

iodined 0.4.2-2 - forged DNS packet Denial of Service

iodined 0.4.2-2 - forged DNS packet Denial of Service !/usr/bin/perl iodined http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation fault on the daemon side. use IO::Socket...

iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit

Exploit for linux platform in category dos / poc ================================================================ iodined \n". "=============================================\n". "Usage: ./shoot-iodined host domain\n". " host: Host addr where iodined is listening\n". " domain: Domain that iodined ...

Ubuntu Update for postgresql-8.1, postgresql-8.2 vulnerability USN-454-1

Ubuntu Update for Linux kernel vulnerabilities USN-454-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4541.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postgresql-8.1, postgresql-8.2 vulnerability USN-454-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

Debian Security Advisory DSA 1719-1 (gnutls13)

The remote host is missing an update to gnutls13 announced via advisory DSA 1719-1. OpenVAS Vulnerability Test $Id: deb17191.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1719-1 gnutls13 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1719-1 : gnutls13 - design flaw

Martin von Gagern discovered that GNUTLS, an implementation of the TLS/SSL protocol, handles verification of X.509 certificate chains incorrectly if a self-signed certificate is configured as a trusted certificate. This could cause clients to accept forged server certificates as genuine...

Important: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix multiple security issues are now available for Red Hat Developer Suite 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

DNS cache poisoning details leaked-vulnerability warning-the black bar safety net

Yesterday Mantasano on an article describing the Dan Kaminsky DNS name server attack details. The article was published a few minutes after that to be deleted. Although Dan Kaminsky have combined The vendor released a patch, but is still in the patch of the push phase, there are still a...

HiFriend - 'cgi-bin/hifriend.pl' Open Email Relay

source: https://www.securityfocus.com/bid/30320/info HiFriend is prone to an open-email-relay vulnerability. An attacker could exploit this issue by constructing a script that would send unsolicited bulk email to an unrestricted amount of email addresses with a forged email address. !/usr/bin/per...

Tsuru-Kame Mail vulnerable in S/MIME signature verification

Overview Tsuru-Kame Mail contains the following vulnerabilities in the S/MIME signature verification: - S/MIME signature verification does not verify the certification path. - S/MIME signature verification does not verify the certification expiration date. The name of the software "Tsuru-Kame Mai...

Shuriken Pro3 S/MIME signature verification does not verify the certificate authenticity

Overview Shuriken Pro3 contains a vulnerability in the S/MIME signature verification where the authenticity of the certificate is not verified when verifying the S/MIME digital signature of an email message. Impact A user can not notice a forged message when it is signed with a malicious digital...

Toshiba HDD & DVD video recorders can be accessed without authentication

Overview Toshiba HDD & DVD video recorders can be accessed without authentication. Impact The user can not notice a forged email signed by a malicious certificate. Solution None...

Becky! Internet Mail vulnerability in S/MIME signature verification

Overview Becky! Internet Mail contains the following vulnerabilities in the S/MIME signature verification: - S/MIME signature verification does not verify the certification path. - S/MIME signature verification does not verify the certification expiration date. Impact Even if a recipient receives...

DEBIAN-CVE-2008-1930

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

CORE-2008-0123: Leopard Server Remote Path Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Leopard Server Remote Path Traversal Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Advisory URL:...

Debian Security Advisory DSA 1173-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 1173-1. Daniel Bleichenbacher discovered a flaw in OpenSSL cryptographic package that could allow an attacker to generate a forged signature that OpenSSL will accept as valid. OpenVAS Vulnerability Test $Id: deb11731.nasl...

Authentication flaw

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature...