Debian: Security Advisory (DSA-1571-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 7.04 / 7.10 / 8.04 LTS : ssl-cert vulnerability (USN-612-4)

USN-612-1 fixed vulnerabilities in openssl. This update provides the corresponding updates for ssl-cert -- potentially compromised snake-oil SSL certificates will be regenerated. A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a resul...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)

Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as 'no-port-forwarding' or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...

USN-612-4: ssl-cert vulnerability

USN-612-1 fixed vulnerabilities in openssl. This update provides the corresponding updates for ssl-cert -- potentially compromised snake-oil SSL certificates will be regenerated. Original advisory details: A weakness has been discovered in the random number generator used by OpenSSL on Debian and...

[USN-612-1] OpenSSL vulnerability

=========================================================== Ubuntu Security Notice USN-612-1 May 13, 2008 openssl vulnerability CVE-2008-0166 =========================================================== A weakness has been discovered in the random number generator used by OpenSSL on Debian and...

USN-612-1: OpenSSL vulnerability

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...

Spoofing

Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks...

CVE-2008-1938

Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks...

CVE-2008-1938

Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks...

CVE-2008-1938

Sony mylo COM-2 firmware before 1.002 does not verify server SSL certificates, enabling potential information disclosure and spoofing. Affected products include the Japan and US models of mylo COM-2 system software prior to Ver.1.002. Root cause: SSL/TLS server certificate validation is not perfo...

Gentoo Linux multiple packages incalid SSL certificates generation

Certificate may be leaked to public file due to invalid ssl-cert eclass implementation...

GLSA-200803-26 : Adobe Acrobat Reader: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-26 Adobe Acrobat Reader: Insecure temporary file creation SUSE reported that the 'acroread' wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact : A local...

Adobe Acrobat Reader: Insecure temporary file creation

Background Acrobat Reader is a PDF reader released by Adobe. Description SUSE reported that the "acroread" wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact A local attacker could exploit this vulnerability to overwrite arbitrar...

Ubuntu 7.10 : qt4-x11 vulnerability (USN-579-1)

It was discovered that QSslSocket did not properly verify SSL certificates. A remote attacker may be able to trick applications using QSslSocket into accepting invalid SSL certificates. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-579-1: Qt vulnerability

It was discovered that QSslSocket did not properly verify SSL certificates. A remote attacker may be able to trick applications using QSslSocket into accepting invalid SSL certificates...

openSUSE 10 Security Update : libqt4 (libqt4-4790)

A bug in the QSslSocket class could under certain circumstances lead to incorrect SSL certificates beeing accepted as valid CVE-2007-5965. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian Security Advisory DSA 1191-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1191-1. Several security related problems have been discovered in Mozilla and derived products such as Mozilla Thunderbird. The Common Vulnerabilities and Exposures project identifies the following...

Debian Security Advisory DSA 1210-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1210-1. Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities:...

Debian: Security Advisory (DSA-1210-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1192-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 1192-1. Several security related problems have been discovered in Mozilla and derived products. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2006-2788 Fernando Ribeiro...