4332 matches found
SSL Certificate Signed with the Publicly Known Cyberoam Key
The X.509 certificate of the remote host was signed by a certificate belonging to a Certificate Authority CA found in Cyberoam devices. The private key corresponding to the CA was discovered and publicly disclosed, meaning that the remote host's X.509 certificate cannot be trusted. TRUSTED...
Add an option in User Directory settings to make an SSL LDAP connection but without verifying that the hostname and certificate match
Starting JIRA 5.1, the embedded crowd has been upgraded from version 2.3.2 to 2.4. This includes the security fix CWD-2690 won't be visible to public that has been announced in Crowd 2.3.6 release notes - Crowd 2.3.6 Release...
Scientific Linux Security Update : kdelibs on SL6.x i386/x86_64
A cross-site scripting XSS flaw was found in the way KHTML, the HTML layout engine used by KDE applications such as the Konqueror web browser, displayed certain error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiti...
Scientific Linux Security Update : ruby on SL5.x, SL4.x i386/x86_64
A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. CVE-2006-6303 An SSL certificate validation flaw w...
Scientific Linux Security Update : kdelibs on SL6.x i386/x86_64
The kdelibs packages provide libraries for the K Desktop Environment KDE. An input sanitization flaw was found in the KSSL KDE SSL Wrapper API. An attacker could supply a specially crafted SSL certificate for example, via a web page to an application using KSSL, such as the Konqueror web browser,...
Scientific Linux Security Update : nspr and nss for SL 5.x on i386/x86_64
CVE-2009-2409 deprecate MD2 in SSL cert validation Kaminsky CVE-2009-2408 firefox/nss: doesn't handle NULL in Common Name properly CVE-2009-2404 nss regexp heap overflow The packages with this update are identical to the packages released on the 20th of July 2009. They are being reissued as a...
Scientific Linux Security Update : wget on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name Daniel Stenberg reported that Wget is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted...
Scientific Linux Security Update : kdelibs and kdelibs3 on SL4.x, SL5.x, SL6.x i386/x86_64
The kdelibs and kdelibs3 packages provide libraries for the K Desktop Environment KDE. An input sanitization flaw was found in the KSSL KDE SSL Wrapper API. An attacker could supply a specially crafted SSL certificate for example, via a web page to an application using KSSL, such as the Konqueror...
Scientific Linux Security Update : php on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2009-2687 php: exifreaddata crash on corrupted JPEG files CVE-2009-3292 php: exif extension: Multiple missing sanity checks in EXIF file processing CVE-2009-3291 php: openssl extension: Incorrect verification of SSL certificate with NUL in name CVE-2009-3546 gd: insufficient input validation ...
Scientific Linux Security Update : yum-rhn-plugin on SL5.x i386/x86_64
It was discovered that yum-rhn-plugin did not verify the SSL certificate for all communication with a Red Hat Network server. An attacker able to redirect the network communication between a victim and an RHN server could use this flaw to provide malicious repository metadata. This metadata could...
Scientific Linux Security Update : postgresql and postgresql84 on SL5.x, SL6.x i386/x86_64 (20120521)
PostgreSQL is an advanced object-relational database management system DBMS. The pgdump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by a SQL command. This SQL comma...
CentOS Update for postgresql CESA-2012:0678 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for postgresql84 CESA-2012:0678 centos5
Check for the Version of postgresql84 OpenVAS Vulnerability Test CentOS Update for postgresql84 CESA-2012:0678 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Mandriva Update for libgdata MDVSA-2012:111 (libgdata)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for libgdata MDVSA-2012:111 (libgdata)
Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVSA-2012:111 libgdata Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Vulnerability in core server (CVE-2012-0867)
SSL certificate name checks are truncated to 32 characters, allowing connection spoofing under some circumstances when using third party certificate authorities...
CVE-2012-0867: Improper Input Validation
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters...
MS KB2728973: Unauthorized Digital Certificates Could Allow Spoofing
The remote host is missing KB2728973, which updates the system's SSL certificate blacklist. %NASLMINLEVEL 70300 %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid59916; scriptversion"1.11";...
openldap security and bug fix update
2.4.23-26 - fix: MozNSS CA cert dir does not work together with PEM CA cert file 818844 - fix: memory leak: defurlpre is not freed 816168 - fix update: Default SSL certificate bundle is not found by openldap library 742023 2.4.23-25 - fix update: Default SSL certificate bundle is not found by...