IBM DB2 9.7 < Fix Pack 2 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is affected by one or more of the following issues : - The 'MODIFIED SQL DATA' table function is not dropped when a definer loses required privileges to maintain the objects. IC63548 - A privilege escalation...

OpenSSL remote Denial of Service

Exploit for linux platform in category dos / poc ================================ OpenSSL remote Denial of Service ================================ / hoagieopensslrecordofdeath.c OPENSSL REMOTE DENIAL-OF-SERVICE EXPLOIT - OpenSSL 0.9.8m short = 16 bit - OpenSSL 0.9.8f through 0.9.8m short != 16 b...

Ubuntu Update for thunderbird regression USN-927-3

Ubuntu Update for Linux kernel vulnerabilities USN-927-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN9273.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird regression USN-927-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

SSL/TLS: Check Supported Cipher Suites

This routine connects to a SSL/TLS service and checks the quality of the accepted cipher suites. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Ubuntu 9.10 : thunderbird regression (USN-927-3)

USN-927-1 fixed vulnerabilities in NSS. Due to upstream changes in NSS 3.12.6, Thunderbird would be unable to initialize the security component and connect with SSL/TLS if the old libnss3-0d transition package was installed. This update fixes the problem. We apologize for the inconvenience. Marsh...

USN-927-3: Thunderbird regression

USN-927-1 fixed vulnerabilities in NSS. Due to upstream changes in NSS 3.12.6, Thunderbird would be unable to initialize the security component and connect with SSL/TLS if the old libnss3-0d transition package was installed. This update fixes the problem. We apologize for the inconvenience...

OpenSSL < 0.9.8n Multiple Vulnerabilities

Binary data 5487.prm...

OpenSSL < 0.9.8n Multiple Vulnerabilities

Binary data 801060.prm...

Mozilla Thunderbird多个拒绝服务漏洞

BUGTRAQ ID: 38831 CVECAN ID: CVE-2010-0161,CVE-2010-0163 Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 如果将Thunderbird客户端配置为使用calmail.berkeley.edu（在这种情况下会对SSL/TLS连接广播 AUTH=GSSAPI），运行在Vista或Windows 7平台上的Thunderbird在加入到AD期间试图使用SSPI时就会崩溃。默认下Thunderbird 2在SMTP期间总会试图使用SSPI。...

Command injection

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

Debian DSA-1904-1 : wget - insufficient input validation

Daniel Stenberg discovered that wget, a network utility to retrieve files from the Web using HTTPS and FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' published at the Blackhat conference some time ago. This allows an attacker to perform undetected man-in-the-middle...

Debian DSA-1869-1 : curl - insufficient input validation

It was discovered that curl, a client and library to get files from servers using HTTP, HTTPS or FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via ...

Debian DSA-1852-1 : fetchmail - insufficient input validation

It was discovered that fetchmail, a full-featured remote mail retrieval and forwarding utility, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via a...

CentOS 4 / 5 : pidgin (CESA-2009:1453)

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

Security fix for the ALT Linux 5 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...

Security fix for the ALT Linux 6 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...