3572 matches found
CentOS Update for finch CESA-2008:1023 centos4 x86_64
Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2008:1023 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandrake Security Advisory MDVSA-2009:025 (pidgin)
The remote host is missing an update to pidgin announced via advisory MDVSA-2009:025. OpenVAS Vulnerability Test $Id: mdksa2009025.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:025 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
GLSA-200901-13 : Pidgin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200901-13 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin and the libpurple library: A participant to the TippingPoint ZDI reported multiple integer overflows in the msnslplinkprocessmsg...
Unfixed XSS vulnerability at www.ezoshosting.com
Security researcher Xylitol, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting www.ezoshosting.com, which at the time of submission ranked 2861970 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is...
CentOS 4 / 5 : pidgin (CESA-2008:1023)
Updated Pidgin packages that fix several security issues and bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is a multi-protocol Internet Messaging client. A denial-of-service...
RHEL 4 / 5 : pidgin (RHSA-2008:1023)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1023 advisory. - pidgin: remote DoS via MSN message with crafted file name CVE-2008-2955 - pidgin: unrestricted download of arbitrary files triggered v...
pidgin: NSS plugin doesn't verify SSL certificates
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
Moderate: Red Hat Security Advisory: pidgin security and bug fix update
Updated Pidgin packages that fix several security issues and bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is a multi-protocol Internet Messaging client. A denial-of-service...
USN-675-1: Pidgin vulnerabilities
It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...
Gentoo Security Advisory GLSA 200701-06 (w3m)
The remote host is missing updates announced in advisory GLSA 200701-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200803-30 (ssl-cert.eclass)
The remote host is missing updates announced in advisory GLSA 200803-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
CVE-2008-3532
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
CVE-2008-3532
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
CVE-2008-3532
CVE-2008-3532 affects the NSS plugin in libpurple (Pidgin) where SSL certificate verification was not performed. The consequence is that remote attackers could trick users into accepting invalid certificates for spoofed services, enabling MITM-style credential exposure or session hijacking. Publi...
CVE-2008-3532
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
CVE-2008-3532
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...
CVE-2008-3249
The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM...
CVE-2008-2809
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openssl-blacklist update (USN-612-11)
USN-612-3 addressed a weakness in OpenSSL certificate and key generation and introduced openssl-blacklist to aid in detecting vulnerable certificates and keys. This update adds RSA-4096 blacklists to the openssl-blacklist-extra package and adjusts openssl-vulnkey to properly handle RSA-4096 and...