CVE-2009-2409

The Network Security Services NSS library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash...

nspr and nss security and bug fix update

nspr: 4.7.4-1.el53.1 - create z-stream version 4.7.4-1 - Update to NSPR 4.7.4 nss: 3.12.3.99.3-1.el53.2 - adjust ssl cipher count constant bug 505650 3.12.3.99.3-1.el53.1 - create z-stream version 3.12.3.99.3-1 - updated to NSS3124FIPS1WITHCKBI175 3.12.3-5 - updated patch to seckey 3.12.3-4 - add...

Fedora Core 11 FEDORA-2009-7478 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7478. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

nspr and nss security, bug fix, and enhancement update

nspr: 4.7.4-1.el53.1 - create z-stream version 4.7.4-1 - Update to NSPR 4.7.4 nss: 3.12.3.99.3-1.0.1.el53.2 - Update clean.gif in the nss-3.12.3.99.3-stripped.tar.bz2 tarball 3.12.3.99.3-1.el53.2 - adjust ssl cipher count constant bug 505650 3.12.3.99.3-1.el53.1 - create z-stream version...

Fedora 11 : openswan-2.6.21-5.fc11 (2009-7478)

Fixes Openswan PSK issue with NSS. Fixes CVE-2009-2185 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability. CVE-2009-2408. Remote exploit for linux platform source: http://www.securityfocus.com/bid/35888/info Mozilla Network Security Services NSS is prone to a security-bypass vulnerability because it fails to proper...

Solaris Update for NSPR 4.1.6 / NSS 3.3.4.8 114049-14

Check for the Version of NSPR 4.1.6 / NSS 3.3.4.8 OpenVAS Vulnerability Test Solaris Update for NSPR 4.1.6 / NSS 3.3.4.8 114049-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for NSPR 4.1.6 / NSS 3.3.4.8 114049-14

Check for the Version of NSPR 4.1.6 / NSS 3.3.4.8 OpenVAS Vulnerability Test Solaris Update for NSPR 4.1.6 / NSS 3.3.4.8 114049-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

HP-UX Update for Netscape NSS Library Suite SSLv2 HPSBUX01070

Check for the Version of Netscape NSS Library Suite SSLv2 OpenVAS Vulnerability Test HP-UX Update for Netscape NSS Library Suite SSLv2 HPSBUX01070 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

HP-UX Update for Netscape NSS Library Suite SSLv2 HPSBUX01070

Check for the Version of Netscape NSS Library Suite SSLv2 OpenVAS Vulnerability Test HP-UX Update for Netscape NSS Library Suite SSLv2 HPSBUX01070 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

MDKA-2007:072 : nss

These updated packages add the CaCert root certificate to the authorities list. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generat...

Solaris 8 (sparc) : 115924-10

SunOS 5.8: NSPR 4.1.6 / NSS 3.3.11 / JSS 3. Date this patch was last updated by Sun : Aug/09/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CentOS 3 / 4 : seamonkey (CESA-2006:0734)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

FreeBSD : nss -- exploitable buffer overflow in SSLv2 protocol handler (207f8ff3-f697-11d8-81b0-000347a4fa7d)

ISS X-Force reports that a remotely exploitable buffer overflow exists in the Netscape Security Services NSS library's implementation of SSLv2. From their advisory : The NSS library contains a flaw in SSLv2 record parsing that may lead to remote compromise. When parsing the first record in an SSL...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : nss, firefox vulnerability (USN-740-1)

The MD5 algorithm is known not to be collision resistant. This update blacklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Fedora 10 : nss-3.12.2.0-4.fc10 (2009-1291)

This updates adds protection against rogue CA that was generated as a proof-of- concept of the MD5 collision attacks against X509 signatures: http://www.win.tue.nl/hashclash/rogue-ca/ , related to CVE-2004-2761. Note that Tenable Network Security has extracted the preceding description block...

Mandriva Update for nss MDKA-2007:072 (nss)

Check for the Version of nss OpenVAS Vulnerability Test Mandriva Update for nss MDKA-2007:072 nss Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)

Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDKSA-2007:050-1 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for nss MDKA-2007:072 (nss)

Check for the Version of nss OpenVAS Vulnerability Test Mandriva Update for nss MDKA-2007:072 nss Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Debian Security Advisory DSA 1758-1 (nss-ldapd)

The remote host is missing an update to nss-ldapd announced via advisory DSA 1758-1. OpenVAS Vulnerability Test $Id: deb17581.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1758-1 nss-ldapd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...