592 matches found
CVE-2012-0717
IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors...
Authentication flaw
IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors...
CVE-2012-0717
IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors...
CVE-2012-0717
CVE-2012-0717 affects IBM WebSphere Application Server 7.0 (prior to 7.0.0.23) where a specific SSLv2 configuration with client authentication can allow a remote attacker to bypass X.509 client-certificate authentication via unspecified vectors. The condition requires: SSL enabled (SSLEnable), SS...
OpenSSL 0.9.6e < 0.9.6f Vulnerability
The version of OpenSSL installed on the remote host is prior to 0.9.6f. It is, therefore, affected by a vulnerability as referenced in the 0.9.6f advisory. - OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to...
Nmap NSE net: sslv2
Determines whether the server supports obsolete and less secure SSLv2, and discovers which ciphers it supports. OpenVAS Vulnerability Test $Id: gbnmapsslv2net.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Matthew Boyle NASL-Wrapper: autogenerated Copyright...
Nmap NSE net: sslv2
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE: SSLv2
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Linux Security Advisory : irssi (MDVSA-2010:079)
Multiple vulnerabilities has been found and corrected in irssi : Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle...
USN-929-2: irssi regression
USN-929-1 fixed vulnerabilities in irssi. The upstream changes introduced a regression when using irssi with SSL and an IRC proxy. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that irssi did not perform certificate host validation...
Mandriva Update for irssi MDVSA-2010:079 (irssi)
Check for the Version of irssi OpenVAS Vulnerability Test Mandriva Update for irssi MDVSA-2010:079 irssi Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : irssi vulnerabilities (USN-929-1)
It was discovered that irssi did not perform certificate host validation when using SSL connections. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2010-1155 Aurelien Delaitre discovered that irssi could be...
Ubuntu Update for irssi vulnerabilities USN-929-1
Ubuntu Update for Linux kernel vulnerabilities USN-929-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9291.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for irssi vulnerabilities USN-929-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
USN-929-1: irssi vulnerabilities
It was discovered that irssi did not perform certificate host validation when using SSL connections. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2010-1155 Aurelien Delaitre discovered that irssi could be...
openssl security update
0.9.8e-12.6 - fix CVE-2009-3245 - add missing bnwexpand return checks 570924 0.9.8e-12.5 - fix CVE-2010-0433 - do not pass NULL princ to krb5ktgetentry which in the RHEL-5 and newer versions will crash in such case 569774 0.9.8e-12.4 - do not disable SSLv2 in the renegotiation patch - SSLv2 does...
openssl security update
0.9.7a-43.17.5 - do not disable SSLv2 in the renegotiation patch - SSLv2 does not support renegotiation - allow unsafe renegotiation on clients with SSLOPLEGACYSERVERCONNECT 0.9.7a-43.17.4 - mention the RFC5746 in the renegotiation fix doc 0.9.7a-43.17.3 - CVE-2009-3555 - support the secure...
Mozilla Network Security Services SSLv2 Server Stack Overflow (CVE-2007-0009)
Mozilla Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. NSS provides a support for Secure Sockets Layer SSL, Secure / Multipurpose Internet Mail Extensions S/MIME and other security standards...
Buffer overflow
Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in an invalid Client Hello message...
CVE-2010-0359
Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in an invalid Client Hello message...
CVE-2010-0359
Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in an invalid Client Hello message...