6159 matches found
CVE-2001-1568
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...
CVE-2001-1568
The CVE-2001-1568 issue affects the CMG WAP gateway, where the system fails to verify the fully qualified domain name in the URL against X.509 certificates issued by root CAs. This hostname verification gap enables remote attackers to perform a man-in-the-middle attack to spoof SSL certificates, ...
CVE-2001-1569
Openwave WAP gateway is affected by CVE-2001-1569: it does not verify the fully-qualified domain name in X.509 certificates against root CAs, enabling remote attackers to spoof SSL via a man-in-the-middle. Affected component: Openwave WAP gateway; root-cause: missing hostname verification. Impact...
CVE-2002-1937
The vulnerability CVE-2002-1937 affects Symantec Firewall/VPN Appliance 100 through 200R, where the administrator’s MAC address is hardcoded into the firewall’s configuration. This allows remote attackers to spoof the administrator’s MAC address and perform an ARP poisoning man-in-the-middle atta...
CVE-2002-1937
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password...
CVE-2005-1794
Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks...
CVE-2001-1443
CVE-2001-1443 affects KTH Kerberos IV and Kerberos V (Heimdal) used by Telnet clients. The root cause is that the Telnet connection is not encrypted when the server does not support the requested encryption, enabling a man-in-the-middle to read communications. The NVD entry lists a CVSS v2 base s...
CVE-2001-1473
CVE-2001-1473 : The SSH-1 protocol vulnerability allows a remote attacker to perform man-in-the-middle and replay attacks by crafting a Session ID that matches the target’s Session ID but uses a weaker public key, enabling the attacker to compute the corresponding private key and masquerade as th...
CVE-2004-1611
SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to 1 execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle MITM attack, or 2 obtain the database password via a GetConnection...
putty -- buffer overflow vulnerability in ssh2 support
There is a bug in SSH2 support that allows a server to execute malicious code on a connecting PuTTY client. This attack can be performed before host key verification happens, so a different machine -- man in the middle attack -- could fake the machine you are connecting to...
Debian DSA-361-2 : kdelibs, kdelibs-crypto - several vulnerabilities
Two vulnerabilities were discovered in kdelibs : - CAN-2003-0459: KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the 'user:password@host' form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that li...
RHEL 3 : gaim (RHSA-2004:400)
An updated gaim package that fixes several security issues is now available. Gaim is an instant messenger client that can handle multiple protocols. Buffer overflow bugs were found in the Gaim MSN protocol handler. In order to exploit these bugs, an attacker would have to perform a man in the...
CVE-2002-0970
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack...
CVE-2002-1407
TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack...
CVE-2002-0970
Technical details about CVE-2002-0970 (affected software, affected component, exploit vectors, or fixes) are not provided in the connected documents. Monitor for updates from vendors and security advisories.
CVE-2002-1471
The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack...
GLSA-200404-05 : ipsec-tools contains an X.509 certificates vulnerability.
The remote host is affected by the vulnerability described in GLSA-200404-05 ipsec-tools contains an X.509 certificates vulnerability. racoon a utility in the ipsec-tools package does not verify digital signatures on Phase1 packets. This means that anybody holding the correct X.509 certificate...
Ximian Evolution < 1.1.1 camel Component Man-in-the-Middle SSL Session Weakness
Binary data 1306.prm...