Eircom Netopia Router Backdoor

++++++++++++++++++++ FULL DISCLOSURE OF EIRCOM NETOPIA ROUTER BACKDOOR VULNERABILITY! Yes, failcom suck, and they did it again. DERP! They gave us a nice TELNET shell into their routers, and now we can mess about 'cos it spawns a root shell by magic! and magic is the actual command! They also lef...

Mozilla Firefox 3.5.x < 3.5.18 Invalid HTTP Certificates

Binary data 801236.prm...

SeaMonkey 2.0.x < 2.0.13 Invalid HTTP Certificates

Binary data 5844.prm...

Mozilla Firefox 3.6.x < 3.6.16 Invalid HTTP Certificates

Binary data 801340.prm...

MS KB2524375: Fraudulent Digital Certificates Could Allow Spoofing (deprecated)

The remote host is missing KB2524375, which updates the system's SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent, public websites. Without this update, browsers will be unable to learn that the certificates have been...

Mozilla SeaMonkey 2.0.x < 2.0.13 Invalid HTTP Certificates

Binary data 801312.prm...

Blacklisted SSL Certificate

The remote service uses an SSL certificate that is either fraudulent, no longer secure due to leaked or compromised private keys, or was issued from a certificate authority that is considered to be untrustworthy. TRUSTED...

Debian DSA-2200-1 : iceweasel - ssl certificate blacklist update

This update for Iceweasel, a web browser based on Firefox, updates the certificate blacklist for several fraudulent HTTPS certificates. More details can be found in a blog posting by Jacob Appelbaum of the Tor project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-2199-1 : iceape - ssl certificate blacklist update

This update for the Iceape internet suite, an unbranded version of SeaMonkey, updates the certificate blacklist for several fraudulent HTTPS certificates. More details can be found in a blog posting by Jacob Appelbaum of the Tor project. The oldstable distribution lenny is not affected. The iceap...

Mozilla Thunderbird 3.1 < 3.1.9 Invalid HTTP Certificates

The installed version of Thunderbird 3.1 is earlier than 3.1.9. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affect...

Firefox 3.6 < 3.6.16 Invalid HTTP Certificates

The installed version of Firefox 3.6 is earlier than 3.6.16. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affected...

SeaMonkey < 2.0.13 Invalid HTTP Certificates

The installed version of SeaMonkey is earlier than 2.0.13. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affected...

ssl-known-key NSE Script

Checks whether the SSL certificate used by a host has a fingerprint that matches an included database of problematic keys. The only databases currently checked are the LittleBlackBox 0.1 database of compromised keys from various devices, some keys reportedly used by the Chinese state-sponsored...

CVE-2010-4506

Passlogix v-GO Self-Service Password Reset SSPR and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save A...

Authentication flaw

Passlogix v-GO Self-Service Password Reset SSPR and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save A...

CVE-2010-4506

Passlogix v-GO Self-Service Password Reset SSPR and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save A...

CVE-2010-4506

CVE-2010-4506 concerns Passlogix v-GO Self-Service Password Reset (SSPR) and OEM prior to version 7.0A. The flaw enables physically proximate attackers to run arbitrary programs without authentication by abusing an invalid SSL certificate and using Internet Explorer to navigate the filesystem via...

Telnet Service START_TLS Support

The remote Telnet service supports the use of a 'STARTTLS' option to switch from a cleartext to an encrypted communications channel. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51890; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

SuSE 11.1 Security Update : epiphany (SAT Patch Number 3611)

epiphany does not support verification of ssl certificates. It nevertheless displayed all https connections as secure. CVE-2010-3312 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

Nmap NSE: SSL Cert

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...