OpenSSL < 0.9.8n Multiple Vulnerabilities

Binary data 5487.prm...

OpenSSL < 0.9.8n Multiple Vulnerabilities

Binary data 801060.prm...

Mozilla Thunderbird多个拒绝服务漏洞

BUGTRAQ ID: 38831 CVECAN ID: CVE-2010-0161,CVE-2010-0163 Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 如果将Thunderbird客户端配置为使用calmail.berkeley.edu（在这种情况下会对SSL/TLS连接广播 AUTH=GSSAPI），运行在Vista或Windows 7平台上的Thunderbird在加入到AD期间试图使用SSPI时就会崩溃。默认下Thunderbird 2在SMTP期间总会试图使用SSPI。...

Command injection

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

Debian DSA-1852-1 : fetchmail - insufficient input validation

It was discovered that fetchmail, a full-featured remote mail retrieval and forwarding utility, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via a...

Debian DSA-1869-1 : curl - insufficient input validation

It was discovered that curl, a client and library to get files from servers using HTTP, HTTPS or FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via ...

Debian DSA-1904-1 : wget - insufficient input validation

Daniel Stenberg discovered that wget, a network utility to retrieve files from the Web using HTTPS and FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' published at the Blackhat conference some time ago. This allows an attacker to perform undetected man-in-the-middle...

CentOS 4 / 5 : pidgin (CESA-2009:1453)

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

Security fix for the ALT Linux 6 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...

Security fix for the ALT Linux 5 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...

Fedora Core 11 FEDORA-2009-13236 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-13236. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 12 FEDORA-2009-13250 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-13250. OpenVAS Vulnerability Test $Id: fcore200913250.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13250 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 12 FEDORA-2009-13250 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-13250. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 11 FEDORA-2009-13236 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-13236. OpenVAS Vulnerability Test $Id: fcore200913236.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13236 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 11 : proftpd-1.3.2c-1.fc11 (2009-13236)

This update addresses CVE-2009-3555 SSL/TLS renegotiation vulnerability, mitigating the problem by refusing all client-initiated SSL/TLS session renegotiations. This update to the latest maintenance release also fixes a number of bugs recorded in the proftpd bug tracker: - SSL/TLS renegotiation...

Fedora 12 : proftpd-1.3.2c-1.fc12 (2009-13250)

This update addresses CVE-2009-3555 SSL/TLS renegotiation vulnerability, mitigating the problem by refusing all client-initiated SSL/TLS session renegotiations. This update to the latest maintenance release also fixes a number of bugs recorded in the proftpd bug tracker: - SSL/TLS renegotiation...