4869 matches found
Solaris 8 (sparc) : 115924-10
SunOS 5.8: NSPR 4.1.6 / NSS 3.3.11 / JSS 3. Date this patch was last updated by Sun : Aug/09/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
MDKA-2007:072 : nss
These updated packages add the CaCert root certificate to the authorities list. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generat...
CentOS 3 / 4 : seamonkey (CESA-2006:0734)
Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...
FreeBSD : nss -- exploitable buffer overflow in SSLv2 protocol handler (207f8ff3-f697-11d8-81b0-000347a4fa7d)
ISS X-Force reports that a remotely exploitable buffer overflow exists in the Netscape Security Services NSS library's implementation of SSLv2. From their advisory : The NSS library contains a flaw in SSLv2 record parsing that may lead to remote compromise. When parsing the first record in an SSL...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : nss, firefox vulnerability (USN-740-1)
The MD5 algorithm is known not to be collision resistant. This update blacklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...
Mandriva Update for nss MDKA-2007:072 (nss)
Check for the Version of nss OpenVAS Vulnerability Test Mandriva Update for nss MDKA-2007:072 nss Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Mandriva Update for nss MDKA-2007:072 (nss)
Check for the Version of nss OpenVAS Vulnerability Test Mandriva Update for nss MDKA-2007:072 nss Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)
Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDKSA-2007:050-1 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
Debian: Security Advisory (DSA-1758-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1758-1 (nss-ldapd)
The remote host is missing an update to nss-ldapd announced via advisory DSA 1758-1. OpenVAS Vulnerability Test $Id: deb17581.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1758-1 nss-ldapd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
nss-ldapd Weak file permissions
/etc/nss-ldapd.conf flie with LDAP password is world readable...
Debian DSA-1758-1 : nss-ldapd - insecure config file creation
Leigh James discovered that nss-ldapd, an NSS module for using LDAP as a naming service, by default creates the configuration file /etc/nss-ldapd.conf world-readable which could leak the configured LDAP password if one is used for connecting to the LDAP server. %NASLMINLEVEL 70300 C Tenable Netwo...
[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...
CVE-2009-1073
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...
Default credentials
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...
CVE-2009-1073
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...
CVE-2009-1073
Summary of CVE-2009-1073 : The nss-ldapd package (before 0.6.8) creates /etc/nss-ldapd.conf with world-readable permissions, allowing local users to read the bindpw (LDAP password) and potentially disclose credentials. Public sources (Debian, OpenVAS, Nessus) confirm the issue and reference fixes...
PT-2009-1033 · Nss Ldap · Nss Ldap
Name of the Vulnerable Software and Affected Versions: nss-ldapd versions prior to 0.6.8 Description: The issue is related to errors in privilege management, allowing a local user to obtain the cleartext password for the LDAP server. This can be achieved by reading the bindpw field from the...
[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure
------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...
