MD2 algorithm used by security certificates is considered weak

Digital signatures made with the MD2 algorithm are used in some of the issuer certificates that Opera trusts. MD2 is now considered weak...

Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness

...

Crypto flaws becoming a killer for Web applications

One of the few things that most people in the security community seem to agree on is that there is a dire need for better security around Web applications. That need begins with the lack of security training for most Web developers and extends through the inconsistent use of Web-application...

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration source: https://www.securityfocus.com/bid/35196/info Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username...

Apache Tomcat 6.0.18 - Form Authentication Existing/Non-Existing 'Username' Enumeration

source: https://www.securityfocus.com/bid/35196/info Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username exists. Attackers may exploit this weakness to discern valid usernames. This may aid...

ISC BIND 9 EVP_VerifyFinal() / DSA_do_verify() SSL/TLS Signature Validation Weakness

According to its version number, the remote installation of BIND does not properly check the return value from the OpenSSL library functions 'EVPVerifyFinal' and 'DSAdoverify'. A remote attacker may be able to exploit this weakness to spoof answers returned from zones for signature checks on DSA...

HP-UX Update for Filesystem Deadlock HPSBUX00178

Check for the Version of Filesystem Deadlock OpenVAS Vulnerability Test HP-UX Update for Filesystem Deadlock HPSBUX00178 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

memcached -- memcached stats maps Information Disclosure Weakness

Secunia reports: A weakness has been reported in memcached, which can be exploited by malicious people to disclose system information. The weakness is caused due to the application disclosing the content of /proc/self/maps if a stats maps command is received. This can be exploited to disclose e.g...

Memcached / MemcacheDB ASLR Bypass Weakness

The version of memcached / MemcacheDB running on the remote host reveals information about the stack, heap, and shared library memory locations it uses. An unauthenticated remote attacker may be able to leverage this weakness to defeat any address space layout randomization ASLR protection on the...

CVE-2009-0080

The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under the LocalService account, which allows local users to gain privileges by leveraging...

CVE-2009-0080

CVE-2009-0080 corresponds to the Windows Thread Pool ACL Weakness: a flaw in the ThreadPool isolation allows local users to elevate privileges by exploiting incorrect thread ACLs in processes that run under NetworkService or LocalService. The connected Microsoft security bulletin MS09-012 confirm...

CVE-2009-0080

The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under the LocalService account, which allows local users to gain privileges by leveraging...

GLSA-200904-11 : Tor: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200904-11 Tor: Multiple vulnerabilities Theo de Raadt reported that the application does not properly drop privileges to the primary groups of the user specified via the 'User' configuration option CVE-2008-5397. rovv reported tha...

Mandriva Update for bind MDVSA-2008:139 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDVSA-2008:139 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Still no fix for TCP DoS weakness

Software vendors and security officials in several countries have been working for nearly six months on a fix for a serious flaw in a number of TCP implementations that caused a lot of controversy and speculation last fall. The problem could allow attackers to consume all of the resources on a...

Ubuntu: Security Advisory (USN-612-11)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for bind9 vulnerability USN-622-1

Ubuntu Update for Linux kernel vulnerabilities USN-622-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6221.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for bind9 vulnerability USN-622-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for openssl-blacklist update USN-612-8

Ubuntu Update for Linux kernel vulnerabilities USN-612-8 OpenVAS Vulnerability Test $Id: gbubuntuUSN6128.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssl-blacklist update USN-612-8 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for openvpn regression USN-612-10

Ubuntu Update for Linux kernel vulnerabilities USN-612-10 OpenVAS Vulnerability Test $Id: gbubuntuUSN61210.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openvpn regression USN-612-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-612-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...