fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2009-01: Improper SSL certificate subject verification Topics: Improper SSL certificate subject verification Author: Matthias Andree Version: 1.0 Announced: 2009-08-06 Type: Allows undetected Man-in-the-middle attacks against SSL/TLS...

[SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA-1852-1 [email protected] http://www.debian.org/security/ Nico Golde August 7th, 2009 http://www.debian.org/security/faq -...

ISC BIND 9 EVP_VerifyFinal() / DSA_do_verify() SSL/TLS Signature Validation Weakness

According to its version number, the remote installation of BIND does not properly check the return value from the OpenSSL library functions 'EVPVerifyFinal' and 'DSAdoverify'. A remote attacker may be able to exploit this weakness to spoof answers returned from zones for signature checks on DSA...

HP-UX Update for BIND v920 HPSBUX00290

Check for the Version of BIND v920 OpenVAS Vulnerability Test HP-UX Update for BIND v920 HPSBUX00290 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

HP-UX Update for BIND v920 HPSBUX00290

Check for the Version of BIND v920 OpenVAS Vulnerability Test HP-UX Update for BIND v920 HPSBUX00290 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : ntp vulnerability (USN-705-1)

It was discovered that NTP did not properly perform signature verification. A remote attacker could exploit this to bypass certificate validation via a malformed SSL/TLS signature. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:007)

A flaw was found in how NTP checked the return value of signature verification. A remote attacker could use this to bypass certificate validation by using a malformed SSL/TLS signature CVE-2009-0021. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

SOL9889 - NTP vulnerability CVE-2009-0021

Description NTP may not properly check the return value from the OpenSSL EVPVerifyFinal function, which may allow a remote attacker to bypass validation of the certificate chain by way of a malformed SSL/TLS signature for DSA and ECDSA keys. Note: This is a similar vulnerability to CVE-2008-5077...

VMSA-2009-0004:ESX Service Console updates for openssl, bind, and vim

VMSA-2009-0004.3 ESX Service Console updates for openssl, bind, and vim VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0004.3 VMware Security Advisory Synopsis: ESX Service Console updates for openssl, bind, and vim VMware Security Advisory Issue date: 2009-03-31 VMware...

FileZilla Server < 0.9.31 Buffer Overflow Vulnerability

FileZilla Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu Update for openvpn vulnerability USN-612-3

Ubuntu Update for Linux kernel vulnerabilities USN-612-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN6123.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openvpn vulnerability USN-612-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

FileZilla Server Buffer Overflow Vulnerability

This host is running FileZilla Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodfilezillaserverbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ FileZilla Server Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

Fedora 9 : weechat-0.2.6.1-1.fc9 (2009-2861)

Thu Mar 19 2009 Paul P. Komkoff Jr - 0.2.6.1-1 - fix bz490709 - Wed Feb 25 2009 Fedora Release Engineering - 0.2.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sun Nov 30 2008 Ignacio Vazquez-Abrams - 0.2.6-6 - Rebuild for Python 2.6 - Sun Sep 21 2008 Ville Skytta -...

CVE-2009-0884

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets...

Buffer overflow

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets...

CVE-2009-0884

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets...

FileZilla Server SSL/TLS未明缓冲区溢出拒绝服务漏洞

BUGTRAQ ID: 34006 CNCAN ID：CNCAN-2009030602 FileZilla Server是一款FTP服务程序。 FileZilla Server SSL/TLS代码处理上存在缓冲区溢出，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 FileZilla FileZilla Server 0.9.22 FileZilla FileZilla Server 0.9.21 FileZilla FileZilla Server 0.9.19 FileZilla FileZilla Server 0.9.17 FileZilla...

FileZilla FTP Server < 0.9.31 SSL/TLS Packet Overflow DoS

Binary data 4952.prm...

SOL9754 - BIND 9 vulnerability CVE-2009-0025

BIND does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature. Information about this advisory is available at the following location: Note: The previous link takes y...

Mandrake Security Advisory MDVSA-2009:037 (bind)

The remote host is missing an update to bind announced via advisory MDVSA-2009:037. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...