SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6654)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6656)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SuSE 11 Security Update : OpenSSL (SAT Patch Number 1544)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SuSE 11 Security Update : libopenssl (SAT Patch Number 1540)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SOL10674 - Netscape reuse cipher change bug - Qualsys QID 38284

A Qualsys security audit may report that the BIG-IP management IP address is vulnerable to a NETSCAPE REUSE CIPHER CHANGE BUG. The security audit may produce a report that appears similar to the following example: QID: 38284 CVSS Base: 5 1 Category: General remote services CVSS Temporal: 4.7 CVE...

RedHat Security Advisory RHSA-2009:1186

The remote host is missing updates announced in advisory RHSA-2009:1186. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

RedHat Security Advisory RHSA-2009:1190

The remote host is missing updates announced in advisory RHSA-2009:1190. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

RedHat Security Advisory RHSA-2009:1190

The remote host is missing updates announced in advisory RHSA-2009:1190. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

Critical: Red Hat Security Advisory: nspr and nss security and bug fix update

Updated nspr and nss packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Netscape Portable Runtime NSPR provides platform...

Fedora Core 9 FEDORA-2009-0325 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-0325. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Microsoft Windows SChannel单字节堆溢出漏洞（MS07-031）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的安全通道（SChannel）库在实现客户端SSLv3握手协议时存在单字节堆溢出漏洞，远程攻击者可能利用此漏洞控制服务器或造成拒绝服务。 具体来讲，在处理服务器密钥交换SSL握手记录时没有充分地检查长度字段设置为0的畸形服务器端数字签名，导致在有效的堆地址上分配0长度的堆缓冲区，然后执行的逆向内存拷贝将0长度减1拷贝数字签名，这会触发整数下溢，导致堆缓冲区指针退到起始地址之前，最终导致将1字节的用户控制值覆盖到堆控制块。...

FreeBSD-SA-05:21.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:21.openssl Security Advisory The FreeBSD Project Topic: Potential SSL 2.0 rollback Category: contrib Module: openssl Announced: 2005-10-11 Credits: Yutaka Oiwa...

gnutls security update

CentOS Errata and Security Advisory CESA-2005:430 Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library...

Moderate: Red Hat Security Advisory: gnutls security update

Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Laye...

SSLv3 Traffic Negotiation Detection

Binary data 2792.prm...

Web Server SSLv3 Detection

Binary data 1133.prm...

TinySSL Vendor Statement: Basic Constraints Vulnerability

TinySSL is an open source, compact 125k jar, SSLv3 client implementation written in Java 1.1+. Version 1.02 and earlier is vulnerable to the attack posted last week by Mike Benham: http://online.securityfocus.com/archive/1/286290 An updated version 1.03 has been posted which fixes this...