USN-1221-1: Mutt vulnerability

It was discovered that mutt incorrectly verified the hostname in an SSL certificate. An attacker could trick mutt into trusting a rogue SMTPS, IMAPS, or POP3S server's certificate, which was signed by a trusted certificate authority, to perform a machine-in-the-middle attack...

Pantech Link/P7040P phones SSL certificate chain check vulnerabilities

Intermediate certificate basic constraints are not checked...

Libcloud SSL Certificates Security Bypass Vulnerability

This host is installed with Libcloud and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gblibcloudsslcertsecbypassvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ Libcloud SSL Certificates Security Bypass Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

Debian Security Advisory DSA 2299-1 (ca-certificates)

The remote host is missing an update to ca-certificates announced via advisory DSA 2299-1. OpenVAS Vulnerability Test $Id: deb22991.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2299-1 ca-certificates Authors: Thomas Reinke Copyright: Copyright c 2011...

Debian: Security Advisory (DSA-2299-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2307-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2307-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 11, 2011 http://www.debian.org/security/faq -...

CVE-2010-4340

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle MITM attack...

SSL Certificate Expiration Date Detection

Binary data 7052.pasl...

Google tells Iranians to Change their Gmail password

Google tells Iranians to Change their Gmail password Google is advising all its users in Iran to change their Gmail passwords, and check that their Google accounts have not been compromised.In a blog post, Google said that it was directly contacting users in Iran who may have been hit by a...

Google tells Iranians to Change their Gmail password

Google tells Iranians to Change their Gmail password Google is advising all its users in Iran to change their Gmail passwords, and check that their Google accounts have not been compromised.In a blog post, Google said that it was directly contacting users in Iran who may have been hit by a...

SSL Certificate Signed with the Revoked DigiNotar Certificate Authority

The X.509 certificate of the remote host was signed by a certificate belonging to a Certificate Authority CA called DigiNotar, which was revoked due to a known compromise. You should verify that the remote certificate indeed was obtained legally, and you should get a new CA to sign it, as most we...

[SECURITY] [DSA 2299-1] ca-certificates security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2299-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 31, 2011 http://www.debian.org/security/faq -...

DSA-2299-1 ca-certificates - untrusted root CA

Bulletin has no description...

Iranian Man-in-the-Middle Attack Against Google certificate

Iranian Man-in-the-Middle Attack Against Google certificate Recently discovered attempts of an SSL man-in-the-middle attack against Google users - spotted by a number of Iranian Internet users - have revealed that Dutch Certificate Authority DigiNotar has issued an SSL certificate for all...

Iranian Man-in-the-Middle Attack Against Google certificate

Iranian Man-in-the-Middle Attack Against Google certificate Recently discovered attempts of an SSL man-in-the-middle attack against Google users - spotted by a number of Iranian Internet users - have revealed that Dutch Certificate Authority DigiNotar has issued an SSL certificate for all...

Fraudulent DigiNotar SSL Certificate

US-CERT is aware of public reports of the existence of fraudulent SSL certificates issued by DigiNotar. These fraudulent SSL certificates could be used by an attacker to masquerade as legitimate sites. Mozilla has released Firefox 3.6.22 and Firefox 6.0.2 to address this issue. Additional...

Attackers Obtain Valid Cert for Google Domains, Mozilla Moves to Revoke It

UPDATE: A certificate authority in the Netherlands issued a valid SSL wildcard certificate for Google to a third party in July, leading to concerns that attackers may have been using the certificate to route sensitive traffic through their own servers, capturing it and compromising user data in t...

CentOS Update for fetchmail CESA-2009:1427 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for fetchmail CESA-2009:1427 centos5 i386

Check for the Version of fetchmail OpenVAS Vulnerability Test CentOS Update for fetchmail CESA-2009:1427 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

JVN#43105011: Android vulnerability where an incorrect SSL certificate is displayed

Android OS contains a vulnerability where a SSL certificate from an outside site is displayed when a user attempts to display a SSL certificate from a site that reads in contents from an outside site. Impact An attacker may trick the user into believing the site being visited is safe, which may...