DEBIAN-CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

DEBIAN-CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

Design/Logic Flaw

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

Open redirect

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3312

CVE-2010-3312 affects Epiphany (2.28/2.29) when using WebKit and LibSoup, where the UI unconditionally shows a closed-lock icon for any https URL, potentially enabling MITM via a crafted X.509 certificate. Related advisories mention Midori pre-0.2.5 and OpenSUSE/openSUSE libwebkit/WebKitGTK+ vers...

CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3900

CVE-2010-3900 affects Midori before 0.2.5 when used with WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91. Root cause: X.509 certificates are not verified, allowing MITM attackers to spoof HTTPS sites with a crafted server certificate. Impact is Spoofed HTTPS sites and potential data exposure. ...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

SLES10: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5048922...

SLES9: Security update for Red Carpet

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libredcarpet rug rcd-devel libredcarpet-python rcd rcd-modules-devel red-carpet rcd-modules libredcarpet-tools libsoup-devel More details may also be...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015490...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015490...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5048922...