openSUSE 10 Security Update : mutt (mutt-6487)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-6487. The text description of this plugin ...

openSUSE 10 Security Update : gnutls (gnutls-6471)

This update of gnutls improves the verification of the domain/subject names in SSL certificates CVE-2009-2730. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-6471. The text description...

Design/Logic Flaw

The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name ...

SuSE 11 Security Update : mutt (SAT Patch Number 1291)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE9 Security Update : mutt (YOU Patch Number 12505)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41326;...

openSUSE Security Update : mutt (mutt-1298)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-1298. The text description of this plugin ...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1303)

Mozilla Thunderbird was updated to version 2.0.0.23. The release fixes one security issue: MFSA 2009-42 / CVE-2009-2408: IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities CA which...

Fedora Core 11 FEDORA-2009-9391 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-9391. OpenVAS Vulnerability Test $Id: fcore20099391.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9391 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-9400 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-9400. OpenVAS Vulnerability Test $Id: fcore20099400.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9400 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...

openSUSE Security Update : gnutls (gnutls-1259)

This update of gnutls improves the verification of the domain/subject names in SSL certificates CVE-2009-2730. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-1259. The text description...

openSUSE Security Update : gnutls (gnutls-1259)

This update of gnutls improves the verification of the domain/subject names in SSL certificates CVE-2009-2730. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-1259. The text description...

Fedora 10 : kdelibs3-3.5.10-13.fc10.1 (2009-9400)

This update fixes CVE-2009-2702, a security issue where SSL certificates containing embedded NUL characters would falsely pass validation when they're actually invalid, for the KDE 3 compatibility version of kdelibs. Note that Tenable Network Security has extracted the preceding description block...

Ubuntu USN-818-1 (curl)

The remote host is missing an update to curl announced via advisory USN-818-1. OpenVAS Vulnerability Test $Id: ubuntu8181.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8181.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-818-1 curl Authors: Thomas Reinke...

openSUSE Security Update : libfreebl3 (libfreebl3-1201)

The Mozilla NSS security framework was updated to version 3.12.3.1. CVE-2009-2404 / MFSA 2009-43 : Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant...

USN-818-1: curl vulnerability

Scott Cantor discovered that Curl did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:198)

Security issues were identified and fixed in firefox 3.0.x : Security researcher Juan Pablo Lopez Yacubian reported that an attacker could call window.open on an invalid URL which looks similar to a legitimate URL and then use document.write to place content within the new document, appearing to...

openSUSE Security Update : finch (finch-188)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. - overly long file names in MSN file transfers could crash pidgin CVE-2008-2955. - SSL certifcates were not verfied. Therefore piding...

Mutt Security Bypass Vulnerability

This host has installed Mutt and is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodmuttsecbypassvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Mutt Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This program...

Mutt 1.5.19 Security Bypass Vulnerability

Mutt is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mutt:mutt"; ifdescription...

Ubuntu 7.10 / 8.04 LTS : pidgin vulnerabilities (USN-675-1)

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...