Opera SSL certificate spofing

After file download dialog for SSL enabled site page is incorrectly shown as SSL protected with SSL certificate of downloaded file...

[SA19480] Opera SSL Certificate "Stealing" Weakness

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

USN-296-1: firefox vulnerabilities

Jonas Sicking discovered that under some circumstances persisted XUL attributes are associated with the wrong URL. A malicious web site could exploit this to execute arbitrary code with the privileges of the user. MFSA 2006-35, CVE-2006-2775 Paul Nickerson discovered that content-defined setters ...

CVE-2006-2703: Undefined Security Weakness

The RedCarpet command-line client rug does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a man-in-the-middle MITM attack...

CVE-2005-2695

Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...

CVE-2005-2695: Undefined Security Weakness

Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...

SSL Certificate Validation Vulnerability in IDS Management Software

...

Cisco Monitoring Center for Security / CiscoWorks Management Center SSL certificate spoofing

Bug in certificate validation allows to spoof IDS / IPS certificate...

CVE-2001-1569

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

CVE-2001-1569: Undefined Security Weakness

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

CVE-2001-1568: Undefined Security Weakness

CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

CVE-2005-1139: Undefined Security Weakness

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks...

CVE-2005-1139

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks...

CVE-2005-0238

CVE-2005-0238 concerns the International Domain Name (IDN) support in Epiphany, where punycode-encoded domain names decoded in URLs and SSL certificates can be interpreted using homograph characters from other scripts. This enables remote attackers to spoof legitimate domain names and facilitates...

[SA14010] iChain Mutual Authentication Unauthorised Resource Access

TITLE: iChain Mutual Authentication Unauthorised Resource Access SECUNIA ADVISORY ID: SA14010 VERIFY ADVISORY: http://secunia.com/advisories/14010/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Novell iChain 2.x http://secunia.com/product/1423/ DESCRIPTION: A...

SSL Certificate Expiry

This plugin checks expiry dates of certificates associated with SSL- enabled services on the target and reports whether any have already expired. TRUSTED...

ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer

Below please find our public report for the HTTPS cache poisoning issue in Internet Explorer. It includes workarounds for server operators, allowing them to protect their web services without having to rely on users to patch their browsers. Regards, ACROS Security http://www.acrossecurity.com...

ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer

Below please find our public report for the HTTPS cache poisoning issue in Internet Explorer. It includes workarounds for server operators, allowing them to protect their web services without having to rely on users to patch their browsers. Regards, ACROS Security http://www.acrossecurity.com...

CVE-2002-1471

The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack...

GLSA-200408-22 : Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-22 Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities Mozilla, Galeon, Epiphany, Mozilla Firefox and Mozilla Thunderbird contain the following vulnerabilities: All Mozilla tools use libpng for...