Microsoft Outlook Remote Code Execution Vulnerability (2756473)

This host is missing a critical security update according to Microsoft Bulletin MS13-068. OpenVAS Vulnerability Test $Id: secpodms13-068.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Outlook Remote Code Execution Vulnerability 2756473 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

PT-2013-4703

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3, 2010 SP1, 2010 SP2 Description A remote code execution issue exists due to the way Microsoft Outlook handles specially crafted S/MIME email messages. This allows attackers to execute arbitrary code by...

MS13-068: Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2756473)

The Outlook component of Microsoft Office is affected by a remote code execution vulnerability due to a flaw in how Outlook parses S/MIME messages. It is possible for a remote attacker to execute arbitrary code if a user opens or previews a specially crafted email in an affected version of Outloo...

SharePoint Fixes Priority for September 2013 Patch Tuesday

It’s no secret that putting SharePoint installations online and making them accessible without authentication is standard practice in many organizations. Those SharePoint administrators, however, may want to rethink their policies after today’s Microsoft Patch Tuesday security bulletins release...

Amazon Linux AMI : openssl (ALAS-2012-62)

A NULL pointer dereference flaw was found in the way OpenSSL parsed Secure/Multipurpose Internet Mail Extensions S/MIME messages. An attacker could use this flaw to crash an application that uses OpenSSL to decrypt or verify S/MIME messages. CVE-2012-1165 A flaw was found in the PKCS7 and...

Oracle Linux 4 : evolution / evolution-data-server (ELSA-2009-0355)

From Red Hat Security Advisory 2009:0355 : Updated evolution and evolution-data-server packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is t...

Oracle Linux 5 : evolution-data-server (ELSA-2009-0354)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0354 advisory. - Add patch for RH bug 488280 CVE-2009-0547, S/MIME signatures. - Add patch for RH bug 488280 CVE-2009-0582, NTLM authentication. Tenable has extracted...

CentOS 5 : nss (CESA-2013:0214)

Updated nss and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of libraries designe...

Microsoft Outlook 'S/MIME EmailAddress'属性错配安全漏洞

BUGTRAQ ID: 60591 Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook所有版本存在S/MIME不完整的问题，对于X509 EmailAddress属性不匹配邮件的“From”地址的数字签名MIME邮件，Outlook并不发出警告。攻击者可利用此漏洞执行钓鱼攻击。 0 Microsoft Outlook 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

[SECURITY] Fedora 17 Update: nss-3.14.3-1.fc17

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 18 Update: nss-3.14.3-1.fc18

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

RedHat Update for nss and nspr RHSA-2013:0214-01

Check for the Version of nss and nspr OpenVAS Vulnerability Test RedHat Update for nss and nspr RHSA-2013:0214-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Scientific Linux Security Update : nss, nss-util, and nspr on SL6.x i386/x86_64 (20130131)

It was found that a Certificate Authority CA mis-issued two intermediate certificates to customers. These certificates could be used to launch man-in- the-middle attacks. This update renders those certificates as untrusted. This covers all uses of the certificates, including SSL, S/MIME, and code...

Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20130131)

It was found that a Certificate Authority CA mis-issued two intermediate certificates to customers. These certificates could be used to launch man-in- the-middle attacks. This update renders those certificates as untrusted. This covers all uses of the certificates, including SSL, S/MIME, and code...

Important: nss

Issue Overview: It was found that a Certificate Authority CA mis-issued two intermediate certificates to customers. These certificates could be used to launch man-in-the-middle attacks. This update renders those certificates as untrusted. This covers all uses of the certificates, including SSL,...

RHEL 6 : nss, nss-util, and nspr (RHSA-2013:0213)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0213 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

Fedora Update for gnupg2 FEDORA-2013-0222

Check for the Version of gnupg2 OpenVAS Vulnerability Test Fedora Update for gnupg2 FEDORA-2013-0222 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for gnupg2 FEDORA-2013-0148

Check for the Version of gnupg2 OpenVAS Vulnerability Test Fedora Update for gnupg2 FEDORA-2013-0148 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 16 Update: gnupg2-2.0.19-7.fc16

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

Fedora Update for gnupg2 FEDORA-2013-0258

Check for the Version of gnupg2 OpenVAS Vulnerability Test Fedora Update for gnupg2 FEDORA-2013-0258 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...