Fraudulent DigiNotar Certificates HTTPS Spoofing

A security breach had been reported at DigiNotar, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Several of DigiNotar's digital certificates had been signed on behalf of a third party, without sufficiently...

SeaMonkey < 2.3.3 Untrusted CA

The installed version of SeaMonkey is earlier than 2.3.3. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of SeaMonkey. Note this is a further fix to MFSA 2011-34, which...

GlobalSign Stops Issuing Certs As It Investigates Claims of Compromise

GlobalSign, a major certificate authority that was named by the hacker who has claimed credit for the DigiNotar hack as another CA he has compromised, has stopped issuing certificates for the time being while it investigates the claims and determines whether its network has in fact been...

Ubuntu Update for thunderbird USN-1197-2

Ubuntu Update for Linux kernel vulnerabilities USN-1197-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN11972.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for thunderbird USN-1197-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

RHEL 4 : seamonkey (RHSA-2011:1266)

Updated SeaMonkey packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. SeaMonkey is an open source web browser, email and newsgroup client, IRC chat client, and HTML...

RedHat Update for firefox RHSA-2011:1242-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for firefox CESA-2011:1242 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1197-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 14 : ca-certificates-2011.78-1.fc14 (2011-11951)

This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...

Fedora 16 : ca-certificates-2011.78-1.fc16 (2011-11907)

This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...

ComodoHacker responsible for DigiNotar Attack

ComodoHacker responsible for DigiNotar Attack The hacker warns the Internet community that he has access to 4 other high-profile CAs, among them being GlobalSign, a certification authority from the U.S. He threatens that he will use his power over the companies to issue false certificates, which...

Audit Report Shows Many Cracks in DigiNotar Security

A new report on the security of DigiNotar paints an ugly picture of the certificate authority’s safeguards and network infrastructure, showing that the company had all of its CA servers on one Windows domain and likely failed to separate the critical components on its network, making it easy for...

Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerability (USN-1197-2)

USN-1197-1 fixed a vulnerability in Firefox with regard to the DigiNotar certificate authority. This update provides the corresponding updates for Thunderbird. We are aware that the DigiNotar Root CA Certificate is still shown as trusted in the Thunderbird certificate manager. This is due to...

CentOS 4 / 5 : firefox / xulrunner (CESA-2011:1242)

Updated firefox packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime...

FreeBSD : nss/ca_root_nss -- fraudulent certificates issued by DigiNotar.nl (aa5bc971-d635-11e0-b3cf-080027ef73ec)

Heather Adkins, Google's Information Security Manager, reported that Google received ... reports of attempted SSL man-in-the-middle MITM attacks against Google users, whereby someone tried to get between them and encrypted Google services. The people affected were primarily located in Iran. The...

[SECURITY] [DSA 2300-2] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2300-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 5, 2011 http://www.debian.org/security/faq -...

What You Need to Know About the DigiNotar Hack

The disturbingly complete compromise of DigiNotar, the Dutch certificate authority, has broad ramifications for other CAs, enterprises and consumers who rely on the shaky web of trust that comprises the CA system. Here’s what you should know about the attack and what you can do to protect yoursel...

Debian DSA-2300-2 : nss - compromised certificate authority

Several unauthorised SSL certificates have been found in the wild issued for the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in the NSS...

Ubuntu 10.04 LTS / 10.10 / 11.04 : firefox, xulrunner-1.9.2 vulnerability (USN-1197-1)

It was discovered that Dutch Certificate Authority DigiNotar had mis-issued multiple fraudulent certificates. These certificates could allow an attacker to perform a 'man in the middle' MITM attack which would make the user believe their connection is secure, but is actually being monitored. For...

SSL Certificate Signed with the Revoked DigiNotar Certificate Authority

The X.509 certificate of the remote host was signed by a certificate belonging to a Certificate Authority CA called DigiNotar, which was revoked due to a known compromise. You should verify that the remote certificate indeed was obtained legally, and you should get a new CA to sign it, as most we...