Design/Logic Flaw

libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname...

CVE-2011-3441

libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname...

Multi Gather DNS Reverse Lookup Scan

Performs DNS reverse lookup using the OS included DNS query command. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather DNS Reverse Lookup Scan', 'Description' = %q Performs DNS rever...

mutt SSL certificate validation vulnerability

SMTP and POP3 certificate hostname is not validated correctly...

Ubuntu Update for mutt USN-1221-1

Ubuntu Update for Linux kernel vulnerabilities USN-1221-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12211.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for mutt USN-1221-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption

======= Summary ======= Name: Lumension Device Control formerly Sanctuary remote memory corruption Release Date: 24 August 2011 Reference: NGS00054 Discoverer: Andy Davis [email protected] Vendor: Lumension Vendor Reference: Systems Affected: Lumension Device Control v4.4 SR6 Risk: High...

dhcpcd shell characters vulnerability

Shell characters vulnerability in the hostname...

mutt: SSL host name check may be skipped when verifying certificate chain

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...

mutt security update

1.5.20-2.20091214hg736b6a.el61.1 - Fixed hostname verification of x.509 certificates. Resolves: 716889 CVE-2011-1429...

Device Hostname

Binary data wmisystemhostname.nbin...

tomcat: information disclosure in authentication headers

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires 1 BASIC or 2 DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the rep...

Fedora 14 : mutt-1.5.21-5.fc14 (2011-7751)

This is an update that fixes a hostname verification of x.509 certificates and a segmentation fault during reading message headers. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Nmap NSE net: afp-serverinfo

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example 'Macmini' or 'MacBookPro'. OpenVAS Vulnerability Test $Id: gbnmapafpserverinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors:...

Nmap NSE net: http-form-brute

Performs brute force password auditing against http form-based authentication. SYNTAX: brute.unique: make sure that each password is only guessed once default: true http-form-brute.hostname: sets the host header in case of virtual hosting brute.retries: the number of times to retry if recoverable...

dhclient: insufficient sanitization of certain DHCP response values

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to...

CVE-2011-0633

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

Debian Security Advisory DSA 2213-1 (x11-xserver-utils)

The remote host is missing an update to x11-xserver-utils announced via advisory DSA 2213-1. OpenVAS Vulnerability Test $Id: deb22131.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2213-1 x11-xserver-utils Authors: Thomas Reinke Copyright: Copyright c 2011...

SSL/TLS: Certificate - Subject Common Name Does Not Match Server FQDN

The SSL/TLS certificate contains a common name CN that does not match the hostname. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

kdelibs: SSL certificate for IP address accepted as valid for hosts that resolve to the IP

kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate...

Fedora 15 : xorg-x11-server-utils-7.5-5.fc15 (2011-4984)

fixes CVE-2011-0465 root hole via rogue hostname in xrdb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...