PT-2009-1087 · Gnu · Gnutls

Name of the Vulnerable Software and Affected Versions: GnuTLS versions prior to 2.6.6 Description: The issue concerns multiple vulnerabilities in the GnuTLS package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected...

GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing

// source: https://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An attacker can exploit these...

GnuTLS 2.6.x - libgnutls libgnutls_pk.c DSA Key Storage Remote Spoofing

GnuTLS 2.6.x - libgnutls libgnutlspk.c DSA Key Storage Remote Spoofing // source: https://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A...

GnuTLS 2.6.x - libgnutls libpk-libgcrypt.c Malformed DSA Key Handling Remote Denial of Service

GnuTLS 2.6.x - libgnutls libpk-libgcrypt.c Malformed DSA Key Handling Remote Denial of Service // source: https://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A...

GnuTLS 2.6.x - libgnutls lib/pk-libgcrypt.c Malformed DSA Key Handling Remote Denial of Service

// source: https://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An attacker can exploit these...

Mandriva Linux Security Advisory : gnutls (MDVSA-2008:227-1)

Martin von Gagern found a flow in how GnuTLS versions 1.2.4 up until 2.6.1 verified certificate chains provided by a server. A malicious server could use this flaw to spoof its identity by tricking client applications that used the GnuTLS library to trust invalid certificates CVE-2008-4989. Updat...

FreeBSD : gnutls -- certificate chain verification DoS (84ab58cf-e4ac-11d8-9b0a-000347a4fa7d)

Patric Hornik reports on a problem in the certificate chain verification procedures of GnuTLS that may result in a denial-of-service vulnerability : The certificate chain should be verified from last root certificate to the first certificate. Otherwise a lot of unauthorized CPU processing can be...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : gnutls12, gnutls13, gnutls26 vulnerability (USN-678-1)

Martin von Gagern discovered that GnuTLS did not properly verify certificate chains when the last certificate in the chain was self-signed. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. CVE-2008-4989. Note that...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : gnutls12, gnutls13, gnutls26 regression (USN-678-2)

USN-678-1 fixed a vulnerability in GnuTLS. The upstream patch introduced a regression when validating certain certificate chains that would report valid certificates as untrusted. This update fixes the problem. We apologize for the inconvenience. Martin von Gagern discovered that GnuTLS did not...

Mandriva Linux Security Advisory : gnutls (MDVSA-2008:106)

Flaws discovered in versions prior to 2.2.4 stable and 2.3.10 development of GnuTLS allow an attacker to cause denial of service application crash, and maybe so far undetermined execute arbitrary code. The updated packages have been patched to fix these flaws. Note that any applications using thi...

openSUSE 10 Security Update : gnutls (gnutls-6079)

The previous security fix for gnutls CVE-2008-4989 introduced a regression in the X.509 validation code for self-signed certificates. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Mandriva Update for gnutls MDVSA-2008:227 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:227 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for gnutls MDVSA-2008:106 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:106 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for gnutls MDVSA-2008:106 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:106 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for gnutls MDVSA-2008:227-1 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:227-1 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for gnutls MDVSA-2008:227-1 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:227-1 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for gnutls MDVSA-2008:227 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2008:227 gnutls Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu Update for gnutls12, gnutls13, gnutls26 regression USN-678-2

Ubuntu Update for Linux kernel vulnerabilities USN-678-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6782.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gnutls12, gnutls13, gnutls26 regression USN-678-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-678-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for curl vulnerability USN-484-1

Ubuntu Update for Linux kernel vulnerabilities USN-484-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4841.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for curl vulnerability USN-484-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...