Lucene search
+L

6397 matches found

OpenVAS
OpenVAS
•added 2013/02/04 12:00 a.m.•20 views

RedHat Update for nss and nspr RHSA-2013:0214-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/02/04 12:00 a.m.•14 views

CentOS Update for nspr CESA-2013:0213 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.3AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/02/04 12:00 a.m.•21 views

CentOS Update for nspr CESA-2013:0214 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.3AI score
SaveExploits0References2
Amazon
Amazon
•added 2013/02/03 12:00 a.m.•33 views

Important: nss

Issue Overview: It was found that a Certificate Authority CA mis-issued two intermediate certificates to customers. These certificates could be used to launch man-in-the-middle attacks. This update renders those certificates as untrusted. This covers all uses of the certificates, including SSL,...

7.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2013/02/01 12:00 a.m.•34 views

RHEL 6 : nss, nss-util, and nspr (RHSA-2013:0213)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0213 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

9.2AI score
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2013/01/31 7:13 p.m.•47 views

Important: Red Hat Security Advisory: nss, nss-util, and nspr security, bug fix, and enhancement update

Updated nss, nss-util, and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of...

7.2AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2013/01/29 12:00 a.m.•90 views

Apple iOS < 6.1 Multiple Vulnerabilities

Binary data appleios61check.nbin...

9.3CVSS8.2AI score0.12862EPSS
SaveExploits8References29
NVD
NVD
•added 2013/01/27 6:55 p.m.•17 views

CVE-2012-5484

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS5.9AI score0.00611EPSS
SaveExploits0References9
PyPA
PyPA
•added 2013/01/27 6:55 p.m.•16 views

PYSEC-2013-36

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS6.7AI score0.00611EPSS
SaveExploits0References9Affected Software1
Prion
Prion
•added 2013/01/27 6:55 p.m.•24 views

Design/Logic Flaw

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS6.5AI score0.00611EPSS
SaveExploits0References9Affected Software1
UbuntuCve
UbuntuCve
•added 2013/01/27 6:55 p.m.•26 views

CVE-2012-5484

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS5.9AI score0.00611EPSS
SaveExploits0References2
OSV
OSV
•added 2013/01/27 6:55 p.m.•9 views

PYSEC-2013-36

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS5.3AI score0.00611EPSS
SaveExploits0References9
PyPA
PyPA
•added 2013/01/27 6:55 p.m.•19 views

PYSEC-2013-38

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS6.7AI score0.00611EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2013/01/27 6:55 p.m.•10 views

PYSEC-2013-38

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

7.9CVSS5.5AI score0.00611EPSS
SaveExploits0References9
CVE
CVE
•added 2013/01/27 6:00 p.m.•113 views

CVE-2012-5484

The CVE-2012-5484 issue affects FreeIPA 2.x and 3.x prior to 3.1.2 where the client fails to correctly obtain the CA certificate from the server, enabling a man-in-the-middle during the join procedure via a crafted certificate. Connected advisories indicate mitigations implemented in IPA client u...

7.9CVSS8AI score0.00611EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2013/01/25 12:00 a.m.•36 views

Scientific Linux Security Update : ipa on SL6.x i386/x86_64 (20130123)

A weakness was found in the way IPA clients communicated with IPA servers when initially attempting to join IPA domains. As there was no secure way to provide the IPA server's Certificate Authority CA certificate to the client during a join, the IPA client enrollment process was susceptible to...

7.9CVSS5.4AI score0.00611EPSS
SaveExploits0References2
Cent OS
Cent OS
•added 2013/01/24 3:12 a.m.•76 views

ipa security update

CentOS Errata and Security Advisory CESA-2013:0188 Updated ipa packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score...

7.9CVSS5.7AI score0.00611EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2013/01/24 12:00 a.m.•34 views

RedHat Update for ipa-client RHSA-2013:0189-01

Check for the Version of ipa-client OpenVAS Vulnerability Test RedHat Update for ipa-client RHSA-2013:0189-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

7.9CVSS8.7AI score0.00611EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/01/24 12:00 a.m.•37 views

RedHat Update for ipa-client RHSA-2013:0189-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

7.9CVSS8.7AI score0.00611EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/01/24 12:00 a.m.•58 views

AIX 5.3 TL 10 : sendmail (IZ72836)

'sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

7.5CVSS6.9AI score0.04959EPSS
SaveExploits5References2
Rows per page
Query Builder