UBUNTU-CVE-2013-4623

The x509parsecrt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service infinite loop and CPU consumption via a certificate message that contains...

CVE-2013-5018

The isasn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1length function, which allows remote attackers to cause a denial of service segmentation fault via a 1 XAuth username, 2 EAP identity, or 3 PEM encoded file that starts with a 0x04, 0x30,...

UBUNTU-CVE-2013-5018

The isasn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1length function, which allows remote attackers to cause a denial of service segmentation fault via a 1 XAuth username, 2 EAP identity, or 3 PEM encoded file that starts with a 0x04, 0x30,...

CVE-2013-5018

The isasn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1length function, which allows remote attackers to cause a denial of service segmentation fault via a 1 XAuth username, 2 EAP identity, or 3 PEM encoded file that starts with a 0x04, 0x30,...

ssl_certificate

This plugin audits SSL certificate parameters. One configurable parameter exists: minExpireDays CA PEM file path Note: Its only usefull when testing HTTPS sites. Plugin type Audit Options Name | Type | Default Value | Description | Help ---|---|---|---|--- minExpireDays | integer | 30 | Set minim...

Fedora 18 : nss-3.14.1-3.fc18 (2013-0173)

Pick up NSS release that distrusts the mis-issued Turktrust intermediates Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4.7 c++ issue in secmodt.h which actually undoes the upstream fix. Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4....

Fedora 17 : nss-3.14.1-3.fc17 (2013-0271)

Pick up NSS release that distrusts the mis-issued Turktrust intermediates Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4.7 c++ issue in secmodt.h which actually undoes the upstream fix. Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4....

HTTP SSL Certificate Impersonation

This module request a copy of the remote SSL certificate and creates a local self.signed version using the information from the remote version. The module then Outputs PEM|DER format private key / certificate and a combined version for use in Apache or other Metasploit modules requiring SSLCert...

Nmap NSE net: ssl-cert

Retrieves a server's SSL certificate. The amount of information printed about the certificate depends on the verbosity level. With no extra verbosity, the script prints the validity period and the commonName, organizationName, stateOrProvinceName, and countryName of the subject. '443/tcp open htt...

RHEL 5 : curl (RHSA-2010:0273)

Updated curl packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

ssl-cert NSE Script

Retrieves a server's SSL certificate. The amount of information printed about the certificate depends on the verbosity level. With no extra verbosity, the script prints the validity period and the commonName, organizationName, stateOrProvinceName, and countryName of the subject. 443/tcp open http...