[USN-1029-1] OpenSSL vulnerabilities

=========================================================== Ubuntu Security Notice USN-1029-1 December 08, 2010 openssl vulnerabilities CVE-2008-7270, CVE-2010-4180 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...

USN-1029-1: OpenSSL vulnerabilities

It was discovered that an old bug workaround in the SSL/TLS server code allowed an attacker to modify the stored session cache ciphersuite. This could possibly allow an attacker to downgrade the ciphersuite to a weaker one on subsequent connections. CVE-2010-4180 It was discovered that an old bug...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openssl vulnerabilities (USN-1029-1)

It was discovered that an old bug workaround in the SSL/TLS server code allowed an attacker to modify the stored session cache ciphersuite. This could possibly allow an attacker to downgrade the ciphersuite to a weaker one on subsequent connections. CVE-2010-4180 It was discovered that an old bug...

[SECURITY] Fedora 14 Update: bareftp-0.3.7-1.fc14

bareFTP is a file transfer client supporting the FTP, FTP over SSL/TLS FTP S and SSH File Transfer Protocol SFTP. It is written in C, targeting the M ono framework and the GNOME desktop environment. bareFTP is free and open source software released under the terms of the GPL license...

Vulnerability in OpenSSL CVE-2010-4180

A flaw in the OpenSSL SSL/TLS server code where an old bug workaround allows malicious clients to modify the stored session cache ciphersuite. In some cases the ciphersuite can be downgraded to a weaker one on subsequent connections. This issue only affects OpenSSL based SSL/TLS server if it uses...

Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1010-1

Ubuntu Update for Linux kernel vulnerabilities USN-1010-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10101.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1010-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks Gmb...

Firesheep – Social Network Session Stealing/Hijacking Tool

A huge wave has been made by this tool in the mainstream media this week as it makes session stealing/hijacking a click and go procedure. It was released at Toorcon 12 and is simply a Firefox Add-on. Stealing sessions/passwords and so on is something we've been able to do for a LONG time using...

Microsoft Windows SChannel客户端证书处理拒绝服务漏洞（MS10-085）

BUGTRAQ ID: 43780 CVE ID: CVE-2010-3229 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的SChannel实现在SSL/TLS握手期间处理协议请求之前没有检查逻辑情况，如果远程攻击者向承载着启用了SSL的网站的IIS服务器发送了特制的客户端证书请求，就会导致LSASS服务停止响应和系统重启。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Serve...

PT-2010-4665 · Microsoft · Iis 7.X +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fix, including Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 Description: A denial of service issue exists due to improper processing of client certificates during SSL...

OpenSSL ssl3_get_key_exchange Use-After-Free Memory Corruption (CVE-2010-2939)

OpenSSL is an open-source library that implements Secure Sockets Layer SSL and Transport Layer Security TLS protocol functionality. A memory corruption vulnerability has been reported in OpenSSL library. The vulnerability is due to an error in ssl3getkeyexchange function while handling server key...

CVE-2010-1800

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses...

Apple Fixes 13 Bugs in Major OS X Patch Release

Apple released a patch Tuesday that fixes more than a dozen bugs, including a critical remote code-execution flaw in Apple Type Services. The patch release also includes a fix for a flaw in CFNetwork that enabled an attacker to intercept user credentials and other sensitive data silently on a...

Ubuntu: Security Advisory (USN-967-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for w3m vulnerability USN-967-1

Ubuntu Update for Linux kernel vulnerabilities USN-967-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9671.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for w3m vulnerability USN-967-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.n...

[USN-967-1] w3m vulnerability

=========================================================== Ubuntu Security Notice USN-967-1 August 09, 2010 w3m vulnerability CVE-2010-2074 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : w3m vulnerability (USN-967-1)

Ludwig Nussel discovered w3m does not properly handle SSL/TLS certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2010-2074. Note that Tenable Network...

USN-967-1: w3m vulnerability

Ludwig Nussel discovered w3m does not properly handle SSL/TLS certificates with NULL characters in the certificate name. An attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications. CVE-2010-2074...

Encrypted UDP based FTP: UFTP

Encrypted UDP based FTP with multicast UPDATE: Version 4 of UFTP is now available! The protocol has been heavily altered to support a number of new features : The ability to send multiple files in a single session An SSL/TLS derived encryption layer to protect your data Multicast tunneling NAT...

Fedora 11 : httpd-2.2.14-1.fc11 (2009-12747)

This update contains the latest stable release of Apache httpd. Three security fixes are included, along with several minor bug fixes. A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could u...

Core FTP Server 1.0 Build 347 Denial Of Service

Date of Discovery: 6-Jun-2010 Credits: leinakesiatgmail.com Vendor: Core FTP Affected: Core FTP Server 1.0 build 347. Earlier versions may also be affected. Overview: Core FTP Server is software for Windows that allows you to exchange files with others via networks and the internet. Core FTP Serv...