Microsoft Azure Cloud Storage Suffers Major Outage Over Expired SSL Certificate

Various news outlets reported late Friday that Microsoft’s public cloud storage service suffered a global outage due to a lapsed security certificate. Beginning around 4 p.m. EST, developers and other Azure customers began being blocked from accessing files. “Storage is currently experiencing a...

dovecot security and bug fix update

1:2.0.9-5 - script-login did not drop privileges correctly 709095 - fix directory traversal due to not obeying chroot directive 709097 - check proxy destination host against SSL certificate name 754980 1:2.0.9-4 - dovecot may not set correct premissions for mail folder 697620 1:2.0.9-3 - fix...

APT1-Related SSL Certificate Detected

An SSL certificate associated with the group known as APT1 was detected on the remote host. APT1's command and control infrastructure uses several self-signed certificates to encrypt communications in their command and control infrastructure. The remote host appears to be using one of these...

[USN-1723-1] Qt vulnerabilities

========================================================================== Ubuntu Security Notice USN-1723-1 February 14, 2013 qt4-x11 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : qt4-x11 vulnerabilities (USN-1723-1)

Richard J. Moore and Peter Hartmann discovered that Qt allowed redirecting requests from http to file schemes. If an attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS, and...

USN-1723-1: Qt vulnerabilities

Richard J. Moore and Peter Hartmann discovered that Qt allowed redirecting requests from http to file schemes. If an attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS, a...

APPLE-SA-2013-01-28-1 iOS 6.1 Software Update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-01-28-1 iOS 6.1 Software Update iOS 6.1 Software Update is now available and addresses the following: Identity Services Available for: iPhone 3GS and later, iPod touch 4th generation and later, iPad 2 and later Impact: Authentication...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA at the suggestion of the CVE project team. The candidate had been associated with a correct report of a security problem, but not a problem that is categorized as a vulnerability...

CVE-2012-4918

Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle MITM attack...

CVE-2012-4918

CVE-2012-4918 affects Call of Duty Elite for iOS 2.0.1. The vulnerability is that the app does not properly validate the server’s SSL certificate, enabling a Man-in-the-Middle (MITM) attack and potential exposure of sensitive information. The available documents confirm the root cause (insufficie...

PT-2013-1735

Name of the Vulnerable Software and Affected Versions Call of Duty Elite for iOS version 2.0.1 Description The issue concerns a failure to properly validate the server SSL certificate, allowing remote attackers to intercept sensitive information through a Man-in-the-Middle MITM attack...

WS-2013-0237

The 'tls-extra' package for haskell TLS versions prior to 0.6.1 is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates from the server...

SSL Certificate Chain Contains Illegitimate TURKTRUST Intermediate CA

The X.509 certificate chain sent by the remote host either contains or is signed by an intermediate Certificate Authority CA that was accidentally issued by TURKTRUST. Certificate chains descending from this intermediate CA could allow an attacker to perform man-in-the-middle attacks and decode...

Rugged Operating System Private Key Disclosure Vulnerability

Rugged Operating System is prone to an information-disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PostgreSQL 8.4 < 8.4.11 / 9.0 < 9.0.7 / 9.1 < 9.1.3 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, or 9.1.x prior to 9.1.3. It is, therefore, potentially affected by multiple vulnerabilities : - Permissions on a function called by a trigger are not properly checked. CVE-2012-0866 - SSL...

IBM Rational Developer for System z Information Disclosure Vulnerability (Windows)

This host is installed with IBM Rational Developer for System z and is prone information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmrationaldeveforsystemzinfodiscvulnwin.nasl 5366 2017-02-20 13:55:38Z cfi $ IBM Rational Developer for System z Information Disclosure Vulnerabili...

IBM Rational Developer for System z Information Disclosure Vulnerability - Windows

IBM Rational Developer for System z is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows IP-HTTPS Server Revoked SSL Certificate Validation Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability that affects the IP-HTTPS server component. Successful exploits may allow attackers to perform man-in-the-middle attacks or impersonate trusted clients, which will aid in further attacks. To exploit this issue an attacker...

CVE-2012-4862

The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors...