CVE-2008-3437

OpenOffice.org OOo before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3433

CVE-2008-3433 affects SpeedBit Download Accelerator Plus (DAP) prior to 8.6.3.9. The issue is that DAP does not properly verify update authenticity, enabling a man-in-the-middle to substitute a Trojan-horse update and allow arbitrary code execution. The vulnerability is demonstrated by references...

CVE-2008-3435

The CVE-2008-3435 issue affects the LinkedIn Browser Toolbar (version 3.0.3.1100 and earlier) where the update mechanism does not properly verify authenticity, enabling a man-in-the-middle to deliver a Trojan horse update and execute arbitrary code. Documented impact is arbitrary code execution v...

CVE-2008-3436

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3440

Sun Java 1.6.003 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3441

Winamp prior to 5.24 fails to verify update authenticity, enabling MITM attackers to run arbitrary code through Trojan horse updates. The vulnerability is demonstrated by use of evilgrade and DNS cache poisoning. Affected component is the update verification process; root cause relates to insuffi...

CVE-2008-3441

Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl of Apple Product Security reported several integer overflows in core modules such as stringobject, unicodeobject, bufferobject,...

CVE-2008-3323

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

Design/Logic Flaw

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

CVE-2008-3045

Unspecified vulnerability in the Industry Database aka Branchendatenbank proindustrydb extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Insufficient Verification of Data Authenticity."...

Design/Logic Flaw

Unspecified vulnerability in the Industry Database aka Branchendatenbank proindustrydb extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Insufficient Verification of Data Authenticity."...

CVE-2008-3045

Unspecified vulnerability in the Industry Database aka Branchendatenbank proindustrydb extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Insufficient Verification of Data Authenticity."...

CVE-2008-3045

Technical details about CVE-2008-3045 are not publicly available in the provided documents. Monitor for updates; no confirmed affected product versions, root cause, impact, or fixes are listed here.

CVE-2008-3045: Undefined Security Weakness

Unspecified vulnerability in the Industry Database aka Branchendatenbank proindustrydb extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Insufficient Verification of Data Authenticity."...

Multiple vulnerabilities in extension Send-A-Card (sr_sendcard)

It has been discovered that the extension Send-A-Card srsendcard is open to multiple security issues. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.2.2 and all versions below Vulnerability Type: Insufficient...

Shuriken Pro3 S/MIME signature verification does not verify the certificate authenticity

Overview Shuriken Pro3 contains a vulnerability in the S/MIME signature verification where the authenticity of the certificate is not verified when verifying the S/MIME digital signature of an email message. Impact A user can not notice a forged message when it is signed with a malicious digital...

TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability

TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-05.html August 7, 2006 -- CVE ID: CVE-2006-3976 CVE-2006-3977 -- Affected Vendor: Computer Associates -- Affected Products: eTrust AntiVir...

Novell Security Announcement NOVELL-SA:2006:001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Novell Security Announcement Product Name: Novell GroupWise Announcement ID: NOVELL-SA:2006:001 Date: Wed Jun 28 13:00:00 MDT 2006 Affected Products: Novell GroupWise 5.x Novell GroupWise 6.0 Novell GroupWise 6.5 Novell GroupWise 7 Novell GroupWise...