CVE-2010-3900

CVE-2010-3900 affects Midori before 0.2.5 when used with WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91. Root cause: X.509 certificates are not verified, allowing MITM attackers to spoof HTTPS sites with a crafted server certificate. Impact is Spoofed HTTPS sites and potential data exposure. ...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3312

CVE-2010-3312 affects Epiphany (2.28/2.29) when using WebKit and LibSoup, where the UI unconditionally shows a closed-lock icon for any https URL, potentially enabling MITM via a crafted X.509 certificate. Related advisories mention Midori pre-0.2.5 and OpenSUSE/openSUSE libwebkit/WebKitGTK+ vers...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3900

Removed by vendor...

CVE-2010-3900: Undefined Security Weakness

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3312: Undefined Security Weakness

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

SLES10: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015490...

SLES9: Security update for Red Carpet

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libredcarpet rug rcd-devel libredcarpet-python rcd rcd-modules-devel red-carpet rcd-modules libredcarpet-tools libsoup-devel More details may also be...

SLES9: Security update for Red Carpet

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libredcarpet rug rcd-devel libredcarpet-python rcd rcd-modules-devel red-carpet rcd-modules libredcarpet-tools libsoup-devel More details may also be...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015490...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5048922...

SLES9: Security update for libsoup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsoup libsoup-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5048922...

SuSE9 Security Update : libsoup (YOU Patch Number 11401)

This update fixes a bug in the HTTP header parsing code. Applications using this library maybe vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'...

SuSE 10 Security Update : libsoup (ZYPP Patch Number 6223)

Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-0585 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : libsoup (YOU Patch Number 12411)

Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-0585 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

[SECURITY] Fedora 10 Update: gupnp-0.12.8-1.fc10

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible...