DEBIAN-CVE-2010-3762

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...

CVE-2010-3762

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...

CVE-2010-3762

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...

[ MDVSA-2010:190 ] libtiff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:190 http://www.mandriva.com/security/ Package : libtiff Date : September 30, 2010 Affected: 2010.0, 2010.1 Problem Description: A vulnerability has been found and corrected in libtiff: libtiff allows remote...

Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS contains several vulnerabilities. These include: - Fragmented IP packets may be used to evade signature inspection. CVE-2007-0917 - IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a...

[SECURITY] Fedora 12 Update: gnupg2-2.0.13-2.fc12

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

Collisions in PDF signatures

Note: This advisory can also be found at http://pdfsig-collision.florz.de/ = Summary = The specification of the Portable Document Format PDF from version 1.3 onward, including ISO 19005-1:2005 PDF/A-1 and ISO 32000-1:2008 equivalent to PDF 1.7, ostensibly defines a mechanism for digitally signing...

Portable Document Format - Specification Signature Collision

Portable Document Format - Specification Signature Collision source: https://www.securityfocus.com/bid/42377/info The Portable Document Format PDF specification is prone to a signature-collision attack when signing PDF documents. An attacker can exploit this issue to create PDF documents containi...

SigPlus Pro ActiveX Version Detection

This script finds the installed SigPlus Pro ActiveX version and saves the version in KB. OpenVAS Vulnerability Test $Id: gbsigplusproactivexdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ SigPlus Pro ActiveX Version Detection Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CentOS 5 : gnupg2 (CESA-2010:0603)

An updated gnupg2 package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gnupg2 security update

CentOS Errata and Security Advisory CESA-2010:0603 An updated gnupg2 package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

RedHat Update for gnupg2 RHSA-2010:0603-01

Check for the Version of gnupg2 OpenVAS Vulnerability Test RedHat Update for gnupg2 RHSA-2010:0603-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Moderate: Red Hat Security Advisory: gnupg2 security update

An updated gnupg2 package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

[SECURITY] Fedora 13 Update: gnupg2-2.0.14-4.fc13

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

Adobe to Share Vulnerability Data with Security Vendors

LAS VEGAS — Adobe’s push to beef up its security posture took another leap forward here with the announcement of plans to start sharing details on software vulnerabilities with security vendors ahead of time to help reduce the window of exposure to hacker attacks. In partnership with Microsoft,...

CVE-2010-0589

The Web Install ActiveX control CSDWebInstaller in Cisco Secure Desktop CSD before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/seamonkey-2.0.4-i486-1slack13.0.txz: Upgraded. This release fixes some more security vulnerabilities. For more information,...

CentOS Update for openssl CESA-2010:0163 centos3 i386

Check for the Version of openssl OpenVAS Vulnerability Test CentOS Update for openssl CESA-2010:0163 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

RedHat Update for openssl RHSA-2010:0163-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2010:0163-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for openssl CESA-2010:0163 centos3 i386

Check for the Version of openssl OpenVAS Vulnerability Test CentOS Update for openssl CESA-2010:0163 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...