3343 matches found
Alt-N MDaemon < 13.0.4 Multiple Vulnerabilities
The remote Windows host is running a version of Alt-N MDaemon that is earlier than 13.0.4. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the 'Strip X-Headers' setting that could allow the application to crash. Issue 10358 - An input...
Security fix for the ALT Linux 7 package socat version 1.7.2.2-alt1
May 27, 2013 Dmitry V. Levin 1.7.2.2-alt1 - Updated to 1.7.2.2 fixes CVE-2013-3571...
Security fix for the ALT Linux 9 package krb5 version 1.11.2-alt2
May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...
Security fix for the ALT Linux 8 package krb5 version 1.11.2-alt2
May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt6
May 14, 2013 Led 2.6.32-alt6 - perf: Treat attr.config as u64 in perfsweventinit CVE-2013-2094 - added gpu/drm/gma500...
Security fix for the ALT Linux 7 package krb5 version 1.11.2-alt2
May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
May 7, 2013 Denis Smirnov 1.4.1-alt1 - 1.4.1 - CVE-2013-2028...
Security fix for the ALT Linux 6 package strongswan version 4.6.4-alt1.M60T.1
April 30, 2013 Michael Shigorin 4.6.4-alt1.M60T.1 - applied the upstream provided patch to fix CVE-2013-2944 ECDSA signature vulnerability if openssl backend is loaded...
Security fix for the ALT Linux 7 package strongswan version 5.0.4-alt1
April 30, 2013 Michael Shigorin 5.0.4-alt1 - 5.0.4: CVE-2013-2944 fix ECDSA signature vulnerability if openssl backend is loaded...
Security fix for the ALT Linux 5 package strongswan version 4.3.7-alt1.M51.1
April 30, 2013 Michael Shigorin 4.3.7-alt1.M51.1 - applied the upstream provided patch to fix CVE-2013-2944 ECDSA signature vulnerability if openssl backend is loaded...
Security fix for the ALT Linux 10 package apache2 version 2.2.24-alt1
April 14, 2013 Aleksey Avdeev 2.2.24-alt1 - 2.2.24 - Security fixes CVE-2012-3499, CVE-2012-4558, CVE-2012-0883, CVE-2012-2687...
Security fix for the ALT Linux 9 package apache2 version 2.2.24-alt1
April 14, 2013 Aleksey Avdeev 2.2.24-alt1 - 2.2.24 - Security fixes CVE-2012-3499, CVE-2012-4558, CVE-2012-0883, CVE-2012-2687...
Security fix for the ALT Linux 8 package apache2 version 2.2.24-alt1
April 14, 2013 Aleksey Avdeev 2.2.24-alt1 - 2.2.24 - Security fixes CVE-2012-3499, CVE-2012-4558, CVE-2012-0883, CVE-2012-2687...
SSL/TLS: Collect and Report Certificate Details
This script collects and reports the details of all SSL/TLS certificates. This data will be used by other tests to verify server certificates. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Security fix for the ALT Linux 8 package freeipa version 3.1.99-3
April 2, 2013 Martin Kosek &[email protected] - 3.1.99-3 - Require 389-base-base = 1.3.0.5 to pull the following fixes: - upgrade deadlock caused by DNA plugin reconfiguration - CVE-2013-1897: unintended information exposure when nsslapd-allow-anonymous-access is set to rootdse...
Security fix for the ALT Linux 8 package mariadb version April
April 1, 2013 Michael Shigorin 5.5.30-alt10 - New version - NB: 5.5.29 had important security fixes, including: + A buffer overflow that can cause a server crash or arbitrary code execution a variant of CVE-2012-5611 + CVE-2012-5627 fast password brute-forcing using the "change user" +...
Security fix for the ALT Linux 7 package krb5 version 1.11.1-alt1
March 30, 2013 Ivan A. Melnikov 1.11.1-alt1 - 1.11.1 + fix a null pointer dereference in the KDC PKINIT code CVE-2013-1415; - drop obsolete patch 21; - add patch 22 from upstream git to fix a memory leak in krb5getinitcredskeytab upstream ticket 7586...
Security fix for the ALT Linux 8 package krb5 version 1.11.1-alt1
March 30, 2013 Ivan A. Melnikov 1.11.1-alt1 - 1.11.1 + fix a null pointer dereference in the KDC PKINIT code CVE-2013-1415; - drop obsolete patch 21; - add patch 22 from upstream git to fix a memory leak in krb5getinitcredskeytab upstream ticket 7586...
axis: missing connection hostname check against X.509 certificate name
Apache Axis did not verify that the server host name matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name...
jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name
It was found that Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...