Fedora Update for amsn FEDORA-2010-7373

Check for the Version of amsn OpenVAS Vulnerability Test Fedora Update for amsn FEDORA-2010-7373 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for amsn FEDORA-2010-7378

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 11 Update: amsn-0.98.3-2.fc11

This is an MSN Messenger clone for Unix, Windows, and Macintosh. It is written in tcl/tk and supports filetransfers, webcam, etc...

[SECURITY] Fedora 12 Update: amsn-0.98.3-1.fc12

This is an MSN Messenger clone for Unix, Windows, and Macintosh. It is written in tcl/tk and supports filetransfers, webcam, etc...

aMSN < 0.97.1 Session Hijack Vulnerability - Windows

aMSN is prone to a session hijacking vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

aMSN Version Detection (Windows)

This script detects the installed version of aMSN and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodamsndetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ aMSN Version Detection Windows Authors: Madhuri D Copyright: Copyright c 2010 SecPod, http://www.secpod.com This program is free...

aMSN Detection (Windows SMB Login)

This script detects the installed version of aMSN. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

aMSN session hijack vulnerability (Windows)

This host is installed with aMSN and is prone to session hijack vulnerability. OpenVAS Vulnerability Test $Id: secpodamsnsessionhijackvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ aMSN session hijack vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

[SECURITY] Fedora 13 Update: amsn-0.98.3-1.fc13

This is an MSN Messenger clone for Unix, Windows, and Macintosh. It is written in tcl/tk and supports filetransfers, webcam, etc...

CVE-2008-7255

loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...

CVE-2008-7255

loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...

CVE-2008-7255

CVE-2008-7255 concerns aMSN (Alvaro’s Messenger) where login_screen.tcl can save a password after logout, enabling session hijacking on unattended workstations. The vulnerability is described with a CVSS v2 base score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) and is classified as a local issue with no ...

CVE-2008-7255

loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...

CVE-2010-0744

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

Code injection

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

CVE-2010-0744

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

CVE-2010-0744

The CVE-2010-0744 issue affects amsn (aka Alvaro's Messenger) 0.98.3 and earlier, where SSL hostname verification is absent, allowing MITM impersonation of an MSN server with an arbitrary certificate. OpenVAS and Fedora NASL entries corroborate that updates were released (e.g., amsn-0.98.3-2.fc11...

CVE-2010-0744

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

aMSN SSL Certificate Vulnerability

aMSN SSL Certificate Vulnerability I. The Vulnerability aMSN does not check SSL certificate before sending MSN user credentials. An attacker is able to obtain MSN username and password with a spoofed certificate and no alert is generated to the user. This vulnerability was found in aMSN 0.97.2...

aMSN - .ctt Remote Denial of Service

aMSN - .ctt Remote Denial of Service source: https://www.securityfocus.com/bid/33096/info aMSN is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers can exploit this issue by enticing an unsuspectin...