openSUSE Security Update : libfreebl3 (openSUSE-SU-2010:0100-1)

Mozilla NSS was updated to version 3.12.6. This fixes all currently known issues in mozilla-nss, and also implements the new TLS/SSL renegotiation handling CVE-2009-3555. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SSL renegotiation attacks detailed explanation-vulnerability warning-the black bar safety net

English good friends can see my English blog on the original. The attack uses the SSL Protocol renegotiation vulnerability, allowing an attacker to man in the middle attacks way in the communication of the initial portion of the insertion of any selected plaintext. The following assuming you on t...

Sourcefire November Vulnerability Report

Sourcefire VRT researcher Alain Zidouemba talks about Microsoft Patch Tuesday, the SSL renegotiation flaw and the iPhone worm...

SOL10737 - SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541

A Man in the Middle attack allows an attacker to inject an arbitrary amount of chosen plain text into the application protocol stream data during a secure session renegotiation that uses SSL version 3.x or TLS version 1.x. This may provide an attacker the ability to perform arbitrary actions on...

Google Chrome < 2.0.172.33 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 2.0.172.33. Such versions are reportedly affected by multiple issues : - A buffer overflow caused by handling unspecified HTTP responses. This could lead to a denial of service or execution of arbitrary code. CVE-2009-2121 ...