PT-2012-1878

Name of the Vulnerable Software and Affected Versions Ubuntu Single Sign On Client versions 11.04 through 11.10 Description The issue allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle MITM attack due to improper validation of SSL certificates when...

CVE-2012-2566

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

Design/Logic Flaw

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

CVE-2012-2566

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

CVE-2012-2566

CVE-2012-2566 concerns Bloxx Web Filtering prior to 5.0.14. The issue is that the product does not correctly interpret the X-Forwarded-For header during HTTPS access-control and logging, which can allow an unauthenticated user to bypass IP/domain restrictions and produce misleading logs. The entr...

PT-2012-4107

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted X-Forwarded-For header during access-control an...

Ubuntu Update for ubuntuone-client USN-1465-3

Ubuntu Update for Linux kernel vulnerabilities USN-1465-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN14653.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubuntuone-client USN-1465-3 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu Update for ubuntuone-client USN-1465-1

Ubuntu Update for Linux kernel vulnerabilities USN-1465-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14651.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubuntuone-client USN-1465-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1465-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS : ubuntuone-client regression (USN-1465-3)

USN-1465-1 fixed vulnerabilities in Ubuntu One Client. The update failed to install on certain Ubuntu 10.04 LTS systems that had a legacy Python 2.5 package installed. This update fixes the problem. We apologize for the inconvenience. It was discovered that the Ubuntu One Client incorrectly...

Ubuntu 11.04 / 11.10 : ubuntu-sso-client vulnerability (USN-1464-1)

It was discovered that the Ubuntu Single Sign On Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information. Note that Tenable...

USN-1465-3: Ubuntu One Client regression

USN-1465-1 fixed vulnerabilities in Ubuntu One Client. The update failed to install on certain Ubuntu 10.04 LTS systems that had a legacy Python 2.5 package installed. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the Ubuntu O...

USN-1465-2: Ubuntu One storage protocol update

USN-1465-1 fixed a vulnerability in the Ubuntu One Client. This update adds a required fix to the Ubuntu One storage protocol library. Original advisory details: It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attack...

USN-1465-1: Ubuntu One Client vulnerability

It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information...

USN-1464-1: Ubuntu Single Sign On Client vulnerability

It was discovered that the Ubuntu Single Sign On Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information...

NASA SSL Digital Certificate hacked by Iranian Hackers

NASA SSL Digital Certificate hacked by Iranian Hackers Iranian hackers 'Cyber Warriors Team' announced in an online post that it compromised an SSL certificate belonging to NASA and subsequently accessed information on thousands of NASA researchers. A space agency representative revealed that...

Cisco ASA Cut Through Proxy Authentication Vulnerability

The remote Cisco ASA is missing a security patch and may be affected by an information disclosure vulnerability. Requesting a resource behind the firewall causes the device to prompt the user for their credentials on a page served over HTTPS. This page contains a session ID. C Tenable Network...

Medium: rubygems

Issue Overview: RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack. Affected Packages: rubygems Issue Correction: Run yum update rubygems or yum update --advisory...