Ubuntu 6.06 LTS : openldap2.2 vulnerability (USN-858-1)

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracte...

openSUSE Security Update : libqt4 (libqt4-1521)

This update fixes the handling of the subjectAltName field in SSL certificates. CVE-2009-2700 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libqt4-1521. The text description of this plugin i...

[USN-858-1] OpenLDAP vulnerability

=========================================================== Ubuntu Security Notice USN-858-1 November 12, 2009 openldap2.2 vulnerability CVE-2009-3767 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory...

openSUSE Security Update : libqt4 (libqt4-1521)

This update fixes the handling of the subjectAltName field in SSL certificates. CVE-2009-2700 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libqt4-1521. The text description of this plugin i...

SuSE 11 Security Update : libqt4 (SAT Patch Number 1522)

This update fixes the handling of the subjectAltName field in SSL certificates. CVE-2009-2700 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 10 Security Update : Qt3 (ZYPP Patch Number 6644)

This update fixes the handling of the subjectAltName field in SSL certificates. CVE-2009-2700 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid42794;...

Mozilla Products IDN Spoofing (CVE-2005-0233)

The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...

openSUSE Security Update : seamonkey (seamonkey-1364)

seamonkey was updated to version 1.1.18, fixing various security issues : MFSA 2009-43 / CVE-2009-2404 Moxie Marlinspike reported a heap overflow vulnerability in the code that handles regular expressions in certificate names. This vulnerability could be used to compromise the browser and run...

openSUSE Security Update : seamonkey (seamonkey-1364)

seamonkey was updated to version 1.1.18, fixing various security issues : MFSA 2009-43 / CVE-2009-2404 Moxie Marlinspike reported a heap overflow vulnerability in the code that handles regular expressions in certificate names. This vulnerability could be used to compromise the browser and run...

SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 6541)

The Mozilla NSS security framework was updated to version 3.12.3.1. - Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL...

Ubuntu USN-842-1 (wget)

The remote host is missing an update to wget announced via advisory USN-842-1. OpenVAS Vulnerability Test $Id: ubuntu8421.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8421.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-842-1 wget Authors: Thomas Reinke...

Ubuntu: Security Advisory (USN-842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : gnutls (gnutls-6471)

This update of gnutls improves the verification of the domain/subject names in SSL certificates CVE-2009-2730. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-6471. The text description...

openSUSE 10 Security Update : mutt (mutt-6487)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-6487. The text description of this plugin ...

Design/Logic Flaw

The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name ...

SuSE 11 Security Update : mutt (SAT Patch Number 1291)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE9 Security Update : mutt (YOU Patch Number 12505)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41326;...

openSUSE Security Update : mutt (mutt-1298)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-1298. The text description of this plugin ...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1303)

Mozilla Thunderbird was updated to version 2.0.0.23. The release fixes one security issue: MFSA 2009-42 / CVE-2009-2408: IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities CA which...

Fedora Core 11 FEDORA-2009-9391 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-9391. OpenVAS Vulnerability Test $Id: fcore20099391.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9391 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...