3622 matches found
Fedora Update for curl FEDORA-2012-0894
Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2012-0894 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora 17 : libgdata-0.11.1-1.fc17 (2012-3932)
This update fixes a problem where libgdata might fail to validate ssl certificates. For details, see http://bugzilla.gnome.org/showbug.cgi?id=671535 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console
The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. Summary VMware ESXi and ESX updates to third party library and ESX Service Console address several security issues. Relevant releases: ESXi 4.1 without patch ESXi410-201201401-SG ESXi 5.0 without patch...
VMware ESXi/ESX updates to third party library and ESX Service Console (VMSA-2012-0001)
The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
duplicates NSE Script
Attempts to discover multihomed systems by analysing and comparing information collected by other scripts. The information analyzed currently includes, SSL certificates, SSH host keys, MAC addresses, and Netbios server names. In order for the script to be able to analyze the data it has...
python-httplib information leakage
SSL certificates are not checked...
Debian DSA-2418-1 : postgresql-8.4 - several vulnerabilities
Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-0866 It was discovered that the permissions of a function called by a trigger are not checked. This...
[SECURITY] [DSA 2418-1] postgresql-8.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2418-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 27, 2012 http://www.debian.org/security/faq -...
DSA-2418-1 postgresql-8.4 - several
Bulletin has no description...
[SECURITY] Fedora 15 Update: curl-7.21.3-13.fc15
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
[SECURITY] Fedora 16 Update: curl-7.21.7-6.fc16
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Breach confirmed in GlobalSign, SSL certificates not compromised
Breach confirmed in GlobalSign, SSL certificates not compromised GlobalSign said on Tuesday that the SSL certificate and key for www.globalsign.com may have been exposed after a hack on an external server in September. However, the company said that after investigating the breach it has found no...
SuSE 11.1 Security Update : Qt (SAT Patch Number 5131)
The following security issues have been fixed : - Specially crafted font files could cause a single byte heap based buffer overflow. CVE-2011-3193 - Specially crafted grey scale images could cause a heap-based buffer overflow. CVE-2011-3194 - SSL servers could run into an endless loop CVE-2010-26...
MS KB2641690: Fraudulent Digital Certificates Could Allow Spoofing (deprecated)
Due to the issuance of several fraudulent SSL certificates, two DigiCert Sdn. Bhd. intermediate certificates have been placed in the Microsoft Untrusted Certificate Store. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56955;...
Fedora 16 : puppet-2.6.12-1.fc16 (2011-14880)
A bug in puppet's SSL certificate handling could allow nodes with a valid certificate to impersonate the puppet master. To be vulnerable, a user would have had to set the certdnsnames variable and generated certificates. This setting is not set by default in the Fedora/EPEL packages. This update...
Medium: perl-libwww-perl
Issue Overview: The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote...
Apple MAC OS X v10.6.8 Safari Multiple Vulnerabilities
This host is installed with Safari and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsafarimultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Apple MAC OS X v10.6.8 Safari Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH...
Apple Mac OS X v10.6.8 Safari Multiple Vulnerabilities
Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
ssl-google-cert-catalog NSE Script
Queries Google's Certificate Catalog for the SSL certificates retrieved from target hosts. The Certificate Catalog provides information about how recently and for how long Google has seen the given certificate. If a certificate doesn't appear in the database, despite being correctly signed by a...