RHEL 7 : docker (RHSA-2017:0116)

An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Moderate: Red Hat Security Advisory: docker security, bug fix, and enhancement update

An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Fedora Update for ca-certificates FEDORA-2017-0b50f61ab2

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : ca-certificates (2017-0b50f61ab2)

This is an update to the Mozilla CA certificates list version 2.11, which has been published as part of Mozilla NSS 3.28.1. For additional details, please refer to the NSS 3.28.1 release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.28 .1releasenotes As in previous...

Fedora 25 : ca-certificates (2017-9784ee67f2)

This is an update to the Mozilla CA certificates list version 2.11, which has been published as part of Mozilla NSS 3.28.1. For additional details, please refer to the NSS 3.28.1 release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.28 .1releasenotes Note: This package...

[SECURITY] Fedora 24 Update: ca-certificates-2017.2.11-1.0.fc24

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

Fedora Update for ca-certificates FEDORA-2017-9784ee67f2

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Insufficient Key Length

puppet uses 1024-bit keys for their CA certificate by default, which according to GlobalSign, is insufficiently secure since 2014...

Ubuntu 14.04 LTS / 16.04 LTS : NSS vulnerabilities (USN-3163-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3163-1 advisory. It was discovered that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause N...

Ubuntu: Security Advisory (USN-3163-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3163-1: NSS vulnerabilities

It was discovered that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause NSS to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-5285 Hubert Kari...

Kaspersky Local CA Root Protected Incorrectly Exploit

Kaspersky fails to adequately protect its local CA root. Kaspersky: Local CA root is incorrectly protected When Kaspersky generate a private key for the local root, they store the private key in %ProgramData%. Obviously this file cannot be shared, because it's the private key for a trusted local...

Kaspersky 17.0.0 - Local CA Root Incorrectly Protected

Kaspersky 17.0.0 - Local CA Root Incorrectly Protected / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=989 When Kaspersky generate a private key for the local root, they store the private key in %ProgramData%. Obviously this file cannot be shared, because it's the private key...

Kaspersky 17.0.0 - Local CA Root Incorrectly Protected

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=989 When Kaspersky generate a private key for the local root, they store the private key in %ProgramData%. Obviously this file cannot be shared, because it's the private key for a trusted local root certificate and users can use ...

Automating Phishing Activities: PhishLulz

Automating Phishing Activities PhishLulz is a Ruby toolset aimed at automating Phishing activities When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are:...

CA Unified Infrastructure Management < 8.4 SP2 Multiple Information Disclosure Vulnerabilities (CA20161109-01)

According to its self-reported version number from the CA Unified Management Portal UMP, the CA Unified Infrastructure Management UIM application running on the remote host is prior to 8.4 SP2. It is, therefore, affected by multiple information disclosure vulnerabilities : - An information...

CA Unified Management Portal (UMP) Detection

Binary data caumpdetect.nbin...

SSL Certificate Signed Using Weak Hashing Algorithm (Known CA)

The remote service uses a known CA certificate in the SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g., MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks CVE-2004-2761, for example. An attacker can...

Fedora Update for ca-certificates FEDORA-2016-541495b486

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ca-certificates FEDORA-2016-d1408c3ba3

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...