4332 matches found
SSL Certificate Signed Using Weak Hashing Algorithm
Binary data 4804.prm...
SSL Certificate Signed Using Weak Hashing Algorithm
The remote service uses an SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g. MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks. An attacker can exploit this to generate another certificate with the sam...
Fake valid SSL certificate creation attack was successfully demonstrated
Valid fake SSL certificate creation attack was demonstratedby exploiting MD5 collisions and RapidSSL certificate generation procedures. The cost of attack is appoximately $2000...
MD5 vulnerable to collision attacks
Overview Weaknesses in the MD5 algorithm allow for collisions in output. As a result, attackers can generate cryptographic tokens or other data that illegitimately appear to be authentic. Description A secure cryptographic hash algorithm is one that generates a unique identifier of a fixed size...
Opera < 9.63 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 9.63 and thus reportedly affected by several issues : - It may be possible to execute arbitrary code on the remote system by manipulating certain text-area contents. 920 - It may be possible to crash the remote browser using certai...
Outdated and vulnerable OpenSource libraries used in "Deutsche Telekom" home banking software
The "Deutsche Telekom" resp. their "T-Online" branch offer their own home banking software for Windows under ftp://software.t-online.de/pub/service/banking/banking70.exe The current release is version 7.00.0004 from 2008-03-17. This software is but insecure; it installs and uses: - the libraries...
openSUSE 10 Security Update : finch (finch-5592)
specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. - overly long file names in MSN file transfers could crash pidgin CVE-2008-2955. - SSL certifcates were not verfied. Therefore piding...
Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Linux)
The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnlin900022.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Linux Authors: Chanda...
Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Windows)
The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnwin900020.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Windows Authors: Sharath S...
Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Linux
Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...
Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Windows
Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...
Design/Logic Flaw
yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...
CVE-2008-3270
yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...
CVE-2008-3270
yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...
CVE-2008-3270
CVE-2008-3270 affects yum-rhn-plugin on Red Hat Enterprise Linux 5. The root cause is that the plugin fails to verify the SSL certificate when contacting the Red Hat Network, enabling a man-in-the-middle to potentially cause a denial of service (loss of updates) or force installation of unrequest...
CVE-2008-3270: Undefined Security Weakness
yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...
RHEL 5 : yum-rhn-plugin (RHSA-2008:0815)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0815 advisory. The yum-rhn-plugin provides support for yum to securely access a Red Hat Network RHN server for software updates. It was discovered that yum-rhn-plug...
Moderate: Red Hat Security Advisory: yum-rhn-plugin security update
Updated yum-rhn-plugin packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The yum-rhn-plugin provides support for yum to securely access a Red Hat Network RHN...
CVE-2008-3532: Undefined Security Weakness
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
Code injection
The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM...