Lucene search
+L

4869 matches found

securityvulns
securityvulns
added 2011/03/29 12:00 a.m.33 views

[SECURITY] [DSA 2203-1] nss security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2203-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 26, 2011 http://www.debian.org/security/faq -...

1.6AI score
SaveExploits0
Fedora
Fedora
added 2011/03/28 6:11 a.m.18 views

[SECURITY] Fedora 15 Update: nss-3.12.9-14.fc15

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

1.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/03/28 12:00 a.m.14 views

Debian DSA-2203-1 : nss - ssl certificate blacklist update

This update for the Network Security Service libraries marks several fraudulent HTTPS certificates as unstrusted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2203. The text itself is...

5.4AI score
SaveExploits0References2
Debian
Debian
added 2011/03/27 1:08 p.m.44 views

[BSA-030] Security update for nss

This update for the Network Security Service libraries marks several fraudulent HTTPS certificates as unstrusted. For the lenny-backports distribution the problems have been fixed in version 3.12,8-1+squeeze1bpo50+1. For the oldstable distribution lenny, this problem has been fixed in version...

5.8AI score
SaveExploits0
Debian
Debian
added 2011/03/26 11:11 a.m.10 views

[SECURITY] [DSA 2203-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2203-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 26, 2011 http://www.debian.org/security/faq -...

6.7AI score
SaveExploits0
NVD
NVD
added 2011/03/15 5:55 p.m.23 views

CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...

6.8CVSS6.8AI score0.01527EPSS
SaveExploits0References6
Prion
Prion
added 2011/03/15 5:55 p.m.19 views

Authentication flaw

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...

6.8CVSS7.4AI score0.01527EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2011/03/15 5:55 p.m.38 views

CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...

6.8CVSS5.9AI score0.01527EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2011/03/15 5:00 p.m.33 views

CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...

6.8AI score0.01527EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2011/03/15 5:00 p.m.41 views

CVE-2011-0438

nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote attackers to bypass authentication...

6.8CVSS6.6AI score0.01527EPSS
SaveExploits0
CVE
CVE
added 2011/03/15 5:00 p.m.72 views

CVE-2011-0438

CVE-2011-0438 affects the nss-pam-ldapd project: nslcd/pam.c in the 0.8.0 PAM module returns a success code when a user is not found in LDAP, enabling remote attackers to bypass authentication. The vulnerability is a direct authentication bypass caused by incorrect handling of non-existent users,...

6.8CVSS7AI score0.01527EPSS
SaveExploits0References6Affected Software1
Oracle linux
Oracle linux
added 2011/02/11 12:00 a.m.45 views

nss security update

nss: 3.12.8-1.0.1.el6 - Update expired PayPalEE.cert to fix build failure - Use blank image instead of clean.gif in nss-3.12.8-stripped.tar.bz2 3.12.8-1 - Update to 3.12.8 nss-softokn: 3.12.8-1 - Update to 3.12.8 nss-util: 3.12.7-1 - Update to 3.12.7...

4.3CVSS0.6AI score0.01096EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2011/01/24 12:00 a.m.21 views

Fedora Update for sssd FEDORA-2011-0364

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2011-0364 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

2.1CVSS6.3AI score0.00486EPSS
SaveExploits0References2
Fedora
Fedora
added 2011/01/21 10:59 p.m.33 views

[SECURITY] Fedora 14 Update: sssd-1.5.0-2.fc14

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

2.1CVSS3.3AI score0.00486EPSS
SaveExploits0
Fedora
Fedora
added 2011/01/21 10:55 p.m.39 views

[SECURITY] Fedora 13 Update: sssd-1.3.0-40.fc13

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

5.1CVSS3.3AI score0.02023EPSS
SaveExploits0
CERT
CERT
added 2011/01/12 12:00 a.m.45 views

WellinTech KingView 6.53 remote heap overflow vulnerability

Overview WellinTech KingView 6.53 contains a remote heap overflow vulnerability in the HistorySrv process which may allow a remote, unauthenticated attacker to execute arbitrary code. Description According to WellinTech's website: "King V iew software is a high-pormance production which can be us...

10CVSS7.5AI score0.20939EPSS
SaveExploits3References9
ThreatPost
ThreatPost
added 2011/01/11 6:12 p.m.15 views

Researcher: Holes Abound in Chinese SCADA

The researcher who discovered a hole in a prominent SCADA software package used in China claims that holes in the country’s SCADA systems aren’t uncommon, and blames a lack of transparency for the vulnerabilities. A security researcher at NSS Labs who disclosed a critical vulnerability in a popul...

1AI score
SaveExploits0References7
OSV
OSV
added 2011/01/06 12:00 a.m.45 views

DSA-2141-2 nss - protocol design flaw

Bulletin has no description...

9.8CVSS7.4AI score0.87264EPSS
SaveExploits16
Debian
Debian
added 2011/01/05 11:20 p.m.67 views

[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw

------------------------------------------------------------------------ Debian Security Advisory DSA-2141-2 [email protected] http://www.debian.org/security/ Stefan Fritsch January 06, 2011 http://www.debian.org/security/faq -...

9.8CVSS7.3AI score0.87264EPSS
SaveExploits16
Debian
Debian
added 2011/01/05 11:20 p.m.70 views

[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw

------------------------------------------------------------------------ Debian Security Advisory DSA-2141-2 [email protected] http://www.debian.org/security/ Stefan Fritsch January 06, 2011 http://www.debian.org/security/faq -...

5.8CVSS3.6AI score0.87264EPSS
SaveExploits16
Rows per page
Query Builder