Ubuntu 10.04 LTS / 10.10 / 11.04 : firefox, xulrunner-1.9.2 vulnerability (USN-1197-1)

It was discovered that Dutch Certificate Authority DigiNotar had mis-issued multiple fraudulent certificates. These certificates could allow an attacker to perform a 'man in the middle' MITM attack which would make the user believe their connection is secure, but is actually being monitored. For...

Dutch Site Claims Mozilla, Yahoo, WordPress, Tor Project All Targets in DigiNotar Attack

There are more signs that a July compromise of DigiNotar, a certificate authority based in the Netherlands, may have been driven by political motives. A Dutch Web site, nu.nl, reported on Wednesday that digital certificates belonging to Mozilla, Yahoo.com, WordPress and The Tor Project were among...

[SECURITY] [DSA 2200-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2200-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 31, 2011 http://www.debian.org/security/faq -...

Black Hat: SSL and the Future of Authenticity

The inherent problems with the certificate authority infrastructure have been known for a long time, but they’ve become even more obvious with the news of the recent compromise of DigiNotar, which resulted in the issuance of a slew of fraudulent SSL certificates. In this talk from the Black Hat U...

DSA-2300-1 nss - compromised certificate authority

Bulletin has no description...

firefox security update

1.9.2.20-3.0.1.el61 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.20-3 - Distrust a specific Certificate Authority...

Firefox 3.6.x < 3.6.21 Out-of-Date CA List

The installed version of Firefox 3.6.x is earlier than 3.6.21 and is potentially affected by an out-of-date certificate authority list. Due to the issuance of several fraudulent SSL certificates, the certificate authority DigiNotar has been disabled in Mozilla Firefox. C Tenable Network Security,...

Google Chrome < 13.0.782.218 Out of Date CA List

The version of Google Chrome installed on the remote host is earlier than 13.0.782.218 and is potentially affected by an out of date certificate authority list. Due to the issuance of several fraudulent SSL certificates, the certificate authority DigiNotar has been disabled in Google Chrome...

thunderbird security update

3.1.12-2.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.12-2 - Distrust a specific Certificate Authority...

Mozilla Thunderbird 3.1.x Out-of-Date CA List

The installed version of Thunderbird 3.1.x is earlier than 3.1.13 and is potentially affected by an out-of-date certificate authority list. Due to the issuance of several fraudulent SSL certificates, the certificate authority DigiNotar has been disabled in Mozilla Thunderbird. C Tenable Network...

SeaMonkey < 2.3.2 Out-of-Date CA List

The installed version of SeaMonkey is earlier than 2.3.2 and is potentially affected by an out-of-date certificate authority list. Due to the issuance of several fraudulent SSL certificates, the certificate authority DigiNotar has been disabled in Mozilla SeaMonkey. C Tenable Network Security, In...

Firefox < 6.0.1 Out-of-Date CA List

The installed version of Firefox is earlier than 6.0.1 and is potentially affected by an out-of-date certificate authority list. Due to the issuance of several fraudulent SSL certificates, the certificate authority DigiNotar has been disabled in Mozilla Firefox. C Tenable Network Security, Inc...

Iranian Man-in-the-Middle Attack Against Google certificate

Iranian Man-in-the-Middle Attack Against Google certificate Recently discovered attempts of an SSL man-in-the-middle attack against Google users - spotted by a number of Iranian Internet users - have revealed that Dutch Certificate Authority DigiNotar has issued an SSL certificate for all...

Protection against fraudulent DigiNotar certificates — Mozilla

Description: Google Chrome user alibo encountered an active "man in the middle" MITM attack on secure SSL connections to Google servers. The fraudulent certificate was mis-issued by DigiNotar, a Dutch Certificate Authority. DigiNotar has reported evidence that other fraudulent certificates were...

Nepal Telecommunications Authority Hacked by w3bd3f4c3r

Nepal Telecommunications Authority Hacked by w3bd3f4c3r Hacker with name "w3bd3f4c3r" or "T34mT!g3R" today hack into the Nepal Telecommunications Authority website using SQL injection Vulnerability. The Vulnerability Information and screenshot is posted by hacker on pastebin : The Leaked info...

Nepal Telecommunications Authority Hacked by w3bd3f4c3r

Nepal Telecommunications Authority Hacked by w3bd3f4c3r Hacker with name "w3bd3f4c3r" or "T34mT!g3R" today hack into the Nepal Telecommunications Authority website using SQL injection Vulnerability. The Vulnerability Information and screenshot is posted by hacker on pastebin : The Leaked info...

Customs Authority of Yemen hacked for Protest against Government

Customs Authority of Yemen hacked for Protest against Government Today a Yemen Hacker "Alexploiter " Deface the Website of Customs Authority of Yemen, to show his Protest against Government. Hacker claim that"Well this week i hacked .gov.ye Yemens govs sites for now i am controlling the DB of the...

Live in Vegas: Latest from Black Hat and DEFCON

UPDATED: The Black Hat Briefings and DEFCON hacker shows hadn’t even gotten under way before making news. Even before braving the 115 degree heat of the Las Vegas strip, researchers have been pulling the covers off their work in recent weeks, and Threatpost has been there, reporting on new method...

Black Hat Talks Taking Hacking to Another Level

The world moves fast, but much of the world of vulnerability research and exploitation has been stuck in stasis for the last few years. Much of the focus has been on memory-corruption vulnerabilities, application-level bugs and using Java and Flash to get around exploit mitigations and other...

CVE-2011-2467

CVE-2011-2467 describes an SQL injection vulnerability in the Likewise Security Authority (lsass) used by Likewise Open (versions 5.4–6.1) and Likewise Enterprise 6.0. The vulnerability could allow a local attacker to execute arbitrary SQL commands via unspecified vectors, with impact described a...