Mozilla Network Security Services CVE-2018-12404 Information Disclosure Vulnerability

Description Mozilla Network Security Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected F5 Traffix SDC 4.4.0 F5 Traffix SDC 5.0.0 F5 Traffix SDC 5.1.0 Mozilla Network...

Security Bulletin: Security vulnerabilities have been identified in IBM Java shipped with IBM Tivoli Security Policy Manager (CVE-2018-3180)

Summary IBM Tivoli Security Policy Manager TSPM is affected through IBM WebSphere Application Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

Virtuozzo 6 : nss / nss-devel / nss-pkcs11-devel / nss-sysinit / etc (VZLSA-2017-2832)

An update for nss is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

curl: Incorrect reuse of client certificates

It was found that the libcurl library using the NSS Network Security Services library as TLS/SSL backend incorrectly re-used client certificates for subsequent TLS connections in certain cases. An attacker could potentially use this flaw to hijack the authentication of the connection by leveragin...

Moderate: Red Hat Security Advisory: nss security update

An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack...

Oracle Linux 7 : nss (ELSA-2018-2768)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2768 advisory. - Backport upstream fix for CVE-2018-12384 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Excerpts From “Why Companies Are Replacing AV with Advanced Endpoint Security”

Is legacy antivirus failing to keep your endpoints secure? In Carbon Black's recent webinar, Fulcanelli Chavez, Sr. Security Operations Analyst at D.A. Davidson, shared how switching from McAfee to Cb Defense has improved protection and simplified operations for his team. Below are excerpts from...

nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack...

Moderate: Red Hat Security Advisory: nss security update

An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Partner Perspectives: Siemplify & Carbon Black Create Competitive Solution for MSSPs

Meny Har is the VP of Product for Siemplify. Advanced threats and an ever-evolving competitive landscape have created an increased demand for managed security services. Organizations of all sizes are turning to managed security services providers MSSPs to help them to effectively manage their...

[SECURITY] Fedora 29 Update: nss-util-3.39.0-2.fc29

Utilities for Network Security Services and the Softoken module...

[SECURITY] Fedora 27 Update: nss-util-3.39.0-1.0.fc27

Utilities for Network Security Services and the Softoken module...

[SECURITY] Fedora 27 Update: nss-softokn-3.39.0-1.0.fc27

Network Security Services Softoken Cryptographic Module...

[SECURITY] Fedora 27 Update: nss-3.39.0-1.0.fc27

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 28 Update: nss-util-3.39.0-1.0.fc28

Utilities for Network Security Services and the Softoken module...

Mozilla Network Security Service Information Disclosure Vulnerability

Mozilla Network Security Services NSS is the United States Mozilla Foundation developed a library network security services library, it can provide cross-platform support for SSL, S/MIME and other Internet security standards. An information disclosure vulnerability exists in Mozilla NSS versions...

PT-2018-2784

Name of the Vulnerable Software and Affected Versions OpenSSH versions through 7.8 Description The issue is related to the auth-gss2.c file in OpenSSH, which lacks protection of service data. This could allow a remote attacker to disclose protected information. Additionally, remotely observable...

DEBIAN-CVE-2016-8635

It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group...

10 Endpoint Security Problems Solved by the Cloud – Managing Multiple Agents

So far in this blog series, we’ve discussed the state of endpoint security, and the challenges of keeping systems up to date and integrating multiple products. This installment will take a look at how the cloud solves our third challenge: managing multiple agents. Too Much To Keep Track Of A good...