Vulnerability: ModernBill Insecure CURL Settings

Vulnerability: ModernBill Insecure CURL Settings Vulnerability discovered by: Justin Samuel www.justinsamuel.com Discovery Date: 2006-07-11 Severity: Less Critical Impact: Exposure of sensitive information Product: ModernBill Affected Versions: 5.0.1 Vendor: ModernGigabyte, LLC...

USN-204-1: SSL library vulnerability

Yutaka Oiwa discovered a possible cryptographic weakness in OpenSSL applications. Applications using the OpenSSL library can use the SSLOPMSIESSLV2RSAPADDING option or SSLOPALL, which implies the former to maintain compatibility with third party products, which is achieved by working around known...

OpenSSL Version Rollback and Weak Cryptographic Algorithm Vulnerabilities

OpenSSL contains vulnerabilities that could allow an unauthenticated, remote attacker to bypass security restrictions. The first vulnerability CVE-2005-2969 affects any application using a SL/TLS server implementation provided by OpenSSL versions 0.9.7g and prior. If these implementations have...

Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL attack ================================================================= Revision 1.0 For Public Release...

SSL - General Settings (CVE-2003-0719; CVE-2004-0826)

SSL Protections use a SSL protocol parser which uses a default port of TCP/443, but this port can be reconfigured...

Debian DSA-465-1 : openssl - several vulnerabilities

Two vulnerabilities were discovered in openssl, an implementation of the SSL protocol, using the Codenomicon TLS Test Tool. More information can be found in the following NISCC Vulnerability Advisory and this OpenSSL advisory. The Common Vulnerabilities and Exposures project identified the...

SUSE-SA:2003:043: openssl

The remote host is missing the patch for the advisory SUSE-SA:2003:043 openssl. OpenSSL is an implementation of the Secure Socket Layer SSL v2/3 and Transport Layer Security TLS v1 protocol. While checking the openssl implementation with a tool-kit from NISCC several errors were revealed most are...

opensslrv.txt

30th Jul 2002 COMANDO OpenSSL multiples vulnerabilidades remotas SISTEMAS AFECTADOS OpenSSL 0.9.6d o anterior OpenSSL 0.9.7-beta2 o anterior PROBLEMA En el OpenSSL Aviso de Seguridad, Ben Laurie expone 5 vulnerabilidades remotas. Pekeño recordatorio: ssl es usado en servidores de html, servidores...

PT-2011-1174

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.24.0 Oracle affected versions not specified Description The issue concerns multiple vulnerabilities in the curl package and Oracle products, which can lead to breaches of confidentiality, integrity, and availability of...