TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

RHEL 5 : openssl (RHSA-2010:0162)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0162 advisory. - openssl: missing bnwexpand return value checks CVE-2009-3245 - TLS: MITM attacks via session renegotiation CVE-2009-3555 - openssl: crash...

RHEL 4 / 5 : nss (RHSA-2010:0165)

Updated nss packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 5 : openssl097a (RHSA-2010:0164)

Updated openssl097a packages that fix a security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 3 / 4 : openssl (RHSA-2010:0163)

Updated openssl packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

IBM DB2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities (Windows)

The host is installed with IBM DB2 and is prone to buffer overflow and TLS Renegotiation vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2repeatbofvulnwin.nasl 5394 2017-02-22 09:22:42Z teissa $ IBM DB2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities Windows Authors: Antu...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0182-1)

java-160-openjdk version 1.7.3 fixes serveral security issues : - CVE-2010-0837: JAR 'unpack200' must verify input parameters - CVE-2010-0845: No ClassCastException for HashAttributeSet constructors if run with -Xcomp - CVE-2010-0838: CMM readMabCurveData Buffer Overflow Vulnerability -...

IBM DB2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities (Linux)

The host is installed with IBM DB2 and is prone to buffer overflow and TLS renegotiation vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2repeatbofvulnlin.nasl 5394 2017-02-22 09:22:42Z teissa $ IBM DB2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities Linux Authors: Antu...

Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 (java-1.6.0-openjdk)

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 java-1.6.0-openjdk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

IBM Db2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities - Windows

IBM Db2 is prone to a buffer overflow and TLS Renegotiation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Db2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities - Linux

IBM DB2 is prone to a buffer overflow and TLS renegotiation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mandriva Update for openssl MDVSA-2010:076-1 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076-1 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openssl MDVSA-2010:076-1 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076-1 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : openssl (MDVSA-2010:076-1)

This update fixes several security issues in openssl : - The ssl3getrecord function in ssl/s3pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service crash via a malformed record in a TLS connection CVE-2010-0740 - OpenSSL before 0.9.8m does not check for a NULL...

Mandriva Update for openssl MDVSA-2010:076 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openssl MDVSA-2010:076 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu Update for nss vulnerability USN-927-1

Ubuntu Update for Linux kernel vulnerabilities USN-927-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9271.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for nss vulnerability USN-927-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu Update for thunderbird regression USN-927-3

Ubuntu Update for Linux kernel vulnerabilities USN-927-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN9273.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird regression USN-927-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-927-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...