CVE-2013-0240: Undefined Security Weakness

Gnome Online Accounts GOA 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the...

CVE-2013-1799: Undefined Security Weakness

Gnome Online Accounts GOA 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network...

PT-2013-2182

Name of the Vulnerable Software and Affected Versions Gnome Online Accounts GOA versions 3.4.x through 3.7.x before 3.7.5 Gnome Online Accounts GOA versions 3.6.x before 3.6.3 Description The issue allows man-in-the-middle attackers to obtain sensitive information, such as credentials, by sniffin...

CentOS 6 : git (CESA-2013:0589)

Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Fedora 18 : git-1.8.1.4-1.fc18 (2013-2829)

This update fixes CVE-2013-0308 Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

PT-2013-1735

Name of the Vulnerable Software and Affected Versions Call of Duty Elite for iOS version 2.0.1 Description The issue concerns a failure to properly validate the server SSL certificate, allowing remote attackers to intercept sensitive information through a Man-in-the-Middle MITM attack...

WS-2013-0237

The 'tls-extra' package for haskell TLS versions prior to 0.6.1 is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates from the server...

PT-2012-6111

Name of the Vulnerable Software and Affected Versions PrestaShop affected versions not specified Description The issue concerns the Canada Post module in PrestaShop, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the...

CVE-2012-1177

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofed certificate...

CVE-2012-1177

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofed certificate...

Scientific Linux Security Update : nspr and nss for SL 5.x on i386/x86_64

CVE-2009-2409 deprecate MD2 in SSL cert validation Kaminsky CVE-2009-2408 firefox/nss: doesn't handle NULL in Common Name properly CVE-2009-2404 nss regexp heap overflow The packages with this update are identical to the packages released on the 20th of July 2009. They are being reissued as a...

Scientific Linux Security Update : ruby on SL5.x, SL4.x i386/x86_64

A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. CVE-2006-6303 An SSL certificate validation flaw w...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVSA-2012:111 libgdata Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2012-1879

Name of the Vulnerable Software and Affected Versions Ubuntu One Client versions 10.04 LTS through 12.04 LTS Description The issue allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle MITM attack due to improper validation of SSL certificates...

CVE-2011-4408: Undefined Security Weakness

The Single Sign On Client ubuntu-sso-client for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle MITM attack...

CVE-2011-4409

CVE-2011-4409 affects the Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS, where the client fails to properly validate SSL certificates, enabling a remote attacker to perform a MITM to spoof a server and read/modify sensitive data. Connected sources (Ubuntu Security Notices US...

PT-2012-1878

Name of the Vulnerable Software and Affected Versions Ubuntu Single Sign On Client versions 11.04 through 11.10 Description The issue allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle MITM attack due to improper validation of SSL certificates when...

CVE-2011-4409

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle MITM attack...