RedHat Security Advisory RHSA-2009:1232

The remote host is missing updates announced in advisory RHSA-2009:1232. The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. A flaw was discovered in the way GnuTLS handles NULL characters in certain fields of X.509 certificates...

RedHat Security Advisory RHSA-2009:1232

The remote host is missing updates announced in advisory RHSA-2009:1232. The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. A flaw was discovered in the way GnuTLS handles NULL characters in certain fields of X.509 certificates...

DEBIAN-CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CentOS 4 / 5 : gnutls (CESA-2009:1232)

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library provides support for cryptographic algorithms and for protocols such as...

gnutls security update

CentOS Errata and Security Advisory CESA-2009:1232 Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library provides support for...

Moderate: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library provides support for cryptographic algorithms and for protocols such as...

Authentication flaw

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

PT-2009-2785 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 Description: A spoofing issue exists in the Secure Channel SChannel authentication component when certificate authentication is...

RedHat Update for gnutls RHSA-2008:0982-01

Check for the Version of gnutls OpenVAS Vulnerability Test RedHat Update for gnutls RHSA-2008:0982-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for gnutls RHSA-2008:0982-01

Check for the Version of gnutls OpenVAS Vulnerability Test RedHat Update for gnutls RHSA-2008:0982-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for gnutls FEDORA-2008-9600

Check for the Version of gnutls OpenVAS Vulnerability Test Fedora Update for gnutls FEDORA-2008-9600 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

TLS certificates can be used to execute arbitrary code – Opera Security Advisories

TLS certificates can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | February 13, 2009 Severity Highly Severe Problem Description When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name ...

FreeBSD Security Advisory (FreeBSD-SA-05:21.openssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:21.openssl.asc ADV FreeBSD-SA-05:21.openssl.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

PT-2008-3573 · Cisco · Cisco Pix Security Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 8.0.x through 8.038 Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 8.1.x through 8.110 Description: The issue allows remote...

DEBIAN-CVE-2008-1672

OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service crash via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference...

[SECURITY] Fedora 8 Update: gnutls-1.6.3-3.fc8

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implem ents the proposed standards by the IETF's TLS working group...

GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service NULL dereference and crash v...

GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw

Integer signedness error in the gnutlsciphertext2compressed function in lib/gnutlscipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service buffer over-read and crash via a certain integer value in the Random field in an encrypted Client Hello message withi...

Debian Security Advisory DSA 986-1 (gnutls11)

The remote host is missing an update to gnutls11 announced via advisory DSA 986-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library, which is also present and used in GnuTLS, the GNU implementation for Transport Laye...