CVE-2011-3849

The CVE-2011-3849 issue affects CA Directory and CA eTrust Directory (dxserver) before build 6279 (SP7 CR1 for r12). The root cause is insufficient bounds checking in SNMP packet parsing, enabling remote, unauthenticated attackers to trigger a denial of service (daemon crash) via crafted SNMP tra...

CVE-2011-3849

Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP packet...

CA Gateway Security RCE Vulnerability

CA Gateway Security is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA Technologies Multiple Products Detection (Windows SMB Login)

SMB login-based detection of multiple CA Technologies products. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

CA Gateway Security Remote Code Execution Vulnerability

This host is installed with CA Gateway Security and is prone to remote code execution Vulnerability. OpenVAS Vulnerability Test $Id: gbcagatewaysecurityremotecodeexecutionvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ CA Gateway Security Remote Code Execution Vulnerability Authors: Rachana Shetty...

[SECURITY] [DSA 2343-1] openssl security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2343-1 [email protected] http://www.debian.org/security/ Raphael Geissert November 09, 2011 http://www.debian.org/security/faq -...

"Digicert Sdn. Bhd." weak certificates

Few weak certificates were issued by intermediate CA...

Debian DSA-2343-1 : openssl - CA trust revocation

Several weak certificates were issued by Malaysian intermediate CA'Digicert Sdn. Bhd.' This event, along with other issues, has lead to Entrust Inc. and Verizon Cybertrust to revoke the CA's cross-signed certificates. This update to OpenSSL, a Secure Sockets Layer toolkit, reflects this decision ...

[SECURITY] [DSA 2343-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2343-1 [email protected] http://www.debian.org/security/ Raphael Geissert November 09, 2011 http://www.debian.org/security/faq -...

DSA-2343-1 openssl - CA trust revocation

Bulletin has no description...

EFF Data Shows Four CAs Compromised Since June

The EFF, through the use of its SSL Observatory, has taken a look at the data from certificate revocation lists for SSL certificates in recent months, and found that there were four separate CAs compromised in the last four months. The data that the EFF looked at was a summary of the reasons that...

Windows Manage Certificate Authority Removal

This module allows the attacker to remove an arbitrary CA certificate from the victim's Trusted Root store. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Certificate Authority...

Windows Manage Certificate Authority Injection

This module allows the attacker to insert an arbitrary CA certificate into the victim's Trusted Root store. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Certificate Authority...

Apple Releases iOS 5, Removes DigiNotar Certs From iPhones, iPads

Apple has released iOS 5, which includes a significant number of security updates, most notably the removal of the DigiNotar root certificates from the iOS trusted root list. The new operating system for iPhones, iPads and iPods also includes support for newer versions of the TLS protocol and...

SSL Certificate Chain Contains Unnecessary Certificates

At least one of the X.509 certificates sent by the remote host is not required to form a path from the server's own certificate to the CA. This may indicate that the certificate bundle installed with the server's certificate is for certificates lower in the certificate hierarchy. Some SSL...

Moderate: Red Hat Security Advisory: kdelibs security and enhancement update

Updated kdelibs packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

kdelibs security and enhancement update

6:4.3.4-11.4 - Resolves: bz743951, use ca-certificates' ca-bundle.crt 6:4.3.4-11.3 - Resolves: bz743515, CVE-2011-3365 - input validation failure...

Medium: ca-certificates

Issue Overview: This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit)

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...