MGASA-2016-0039 Updated ntp packages fix security vulnerability

In ntpd before 4.2.8p6, when used with symmetric key encryption, the client would accept packets encrypted with keys for any configured server, allowing a server to impersonate other servers to clients, thus performing a man-in-the-middle attack. A server can be attacked by a client in a similar...

MGASA-2016-0038 Updated chrony packages fix security vulnerability

In chrony before 1.31.2, when used with symmetric key encryption, the client would accept packets encrypted with keys for any configured server, allowing a server to impersonate other servers to clients, thus performing a man-in-the-middle attack CVE-2016-1567...

CVE-2016-2047

The sslverifyservercert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name...

CVE-2016-2047

CVE-2016-2047 affects multiple MySQL-compatible products. The root cause is failure to verify server hostname against CN/SAN in X.509 certificates, enabling MITM by crafted certificates. Affected: MariaDB prior to 5.5.47, 10.0.x prior to 10.0.23, 10.1.x prior to 10.1.10; Oracle MySQL 5.5.48 and e...

Information disclosure

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors, as demonstrated by login information...

Mozilla Firefox Spoofing Vulnerability (Jan 2016) - Windows

Mozilla Firefox is prone to a spoofing vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Netcore / Netis 路由器后门

漏洞概要 2014 年 8 月末，由中国生产的一系列路由器（国内品牌名称为 Netcore ，国外品牌名称为 Netis ）被爆出含有一个严重的后门漏洞。攻击者可以通过此漏洞获取路由器 root 权限。 2014 年 12 月 28 日，微博上爆料 Netcore 的后门仍然存在（文章地址：http://www.weibo.com/p/1001603792736686871336）。 漏洞描述 Netcore 系列路由器在 /bin 目录下存在一个名为 igdmptd 的程序，此程序会监听 UDP 端口 53413 端口： 之后调用 operateloop...

All Drupal Versions Open to Code Execution, Credential Theft Vulnerabilities

A number of issues exist in the content management system Drupal that could lead to code execution and the theft of database credentials via a man-in-the-middle attack, a researcher warns. The vulnerabilities lie in the way Drupal processes updates, according to Fernando Arnaboldi, senior securit...

CVE-2015-8254

The CVE-2015-8254 entry concerns RSI Video Technologies’ Frontel protocol used by Videofied devices. A vulnerability exists in Frontel prior to protocol version 3 where messages are sent without integrity protection, enabling a remote attacker to spoof messages and potentially initiate false alar...

KLA10732 Security bypass vulnerability in Mozilla Firefox and Firefox ESR

Lack of security enforcement was found in Mozilla Firefox. By exploiting this vulnerability malicious users can conduct man-in-the-middle attack. This vulnerability can be exploited remotely via a collision-based attacks. Technical details This vulnerability caused by not rejecting MD5 signatures...

CVE-2015-7094

CVE-2015-7094 affects CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2. A crafted URL allows man-in-the-middle attackers to bypass HSTS protection. Documented impact is limited to bypassing HSTS via a crafted URL, enabling potential MITM. The vulnerability is addressed in iO...

JVN#44541100: GANMA！ App for iOS fails to verify SSL server certificates

GANMA！ App for iOS provided by COMICSMART INC. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the...

CVE-2015-6357

The rule-update feature in Cisco FireSIGHT Management Center MC 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code...

Cisco FireSIGHT Management Center Certificate Validation Vulnerability

A vulnerability in the rule update functionality of Cisco FireSIGHT Management Center MC could allow an unauthenticated, remote attacker to manipulate the content of the rule update packages and execute arbitrary code on the system. The vulnerability is due to lack of certificate validation durin...

CVE-2015-5655

The CVE-2015-5655 issue affects the Party Track SDK for iOS prior to 1.6.6 from Adways Inc. The underlying vulnerability is that the SDK does not verify X.509 certificates from SSL/TLS servers, enabling man-in-the-middle attacks where an attacker could intercept or modify encrypted communications...

MS15-121: Security update for Schannel to address spoofing: November 10, 2015

None None...

KLA10694 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete lis...

CVE-2015-2902

HP ArcSight SmartConnectors before version 7.1.6 fail to verify X.509 certificates from Logger devices, enabling a man-in-the-middle attacker to spoof devices and read SSL-protected log traffic via a crafted certificate. This vulnerability affects ArcSight SmartConnectors prior to 7.1.6 and has a...

Debian: Security Advisory (DSA-3382-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-7298

ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which makes it easier for remote attackers to conduct man-in-the-middle MITM attacks by leveraging a server using a self-signed...