CA BrightStor Discovery Service Stack Buffer Overflow

No description provided by source. $Id: discoveryudp.rb 9263 2010-05-09 17:52:51Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA BrightStor ARCserve Tape Engine Buffer Overflow

No description provided by source. $Id: tapeengine.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA BrightStor ARCserve for Laptops & Desktops LGServer Multiple Commands Buffer Overflow

No description provided by source. $Id: lgservermulti.rb 10909 2010-11-04 23:59:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CA BrightStor ARCserve Message Engine 0x72 Buffer Overflow

No description provided by source. $Id: messageengine72.rb 10551 2010-10-05 12:38:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Computer Associates Alert Notification Buffer Overflow

No description provided by source. $Id: etrustitmalert.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

SuSE 11.3 Security Update : openssl-certs (SAT Patch Number 9341)

openssl-certs has been updated to include four new and remove two certificates : - new: AtosTrustedRoot2011:2.8.92.51.203.98.44.95.179.50.crt - new: E-TugraCertificationAuthority:2.8.106.104.62.156.81.15 5.203.83.crt - new: TeliaSoneraRootCAv1:2.17.0.149.190.22.160.247.46.70.2...

openSUSE Security Update : ca-certificates-mozilla (openSUSE-SU-2011:0994-1)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : ca-certificates-mozilla (openSUSE-SU-2013:1891-1)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. - distrust: AC DG Tresor SSL bnc854367 - new...

openSUSE Security Update : mumble (openSUSE-2012-127)

remove read permissions for other users on local sqlite database as it may contain passwords bnc747833, CVE-2012-0863 - don't add built-in CA certificates bnc660784 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : ca-certificates-mozilla (openSUSE-SU-2011:0994-1)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

PT-2014-5670

Name of the Vulnerable Software and Affected Versions SAP Web Services Tool CA-WUI-WST affected versions not specified Description The issue concerns hardcoded credentials in the SAP Web Services Tool, making it easier for remote attackers to gain access through unspecified vectors. Recommendatio...

openssl security update

0.9.8e-27.3 - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability 0.9.8e-27.1 - replace expired GlobalSign Root CA certificate in ca-bundle.crt...

CA20140413-01: Security Notice for OpenSSL Heartbleed Vulnerability

CA20140413-01: Security Notice for OpenSSL Heartbleed Vulnerability Issued: April 13, 2014 Updated: May 12, 2014 CA Technologies is investigating an OpenSSL vulnerability, referred to as the "Heartbleed bug" that was publicly disclosed on April 7, 2014. CVE identifier CVE-2014-0160 has been...

CA Erwin Web Portal Multiple Directory Traversal Vulnerabilities (CVE-2014-2210)

Multiple directory traversal vulnerabilities have been reported in CA ERwin Web Portal. The vulnerabilities are due to lack of authentication and insufficient input validation in the FileAccessServiceProvider and ProfileIconServlet servlets when processing HTTP requests. By sending crafted HTTP...

Mozilla Asks CAs for Details on Subordinate Certificate Controls

Mozilla has warned certificate authorities included in its root CA Certificate Program that they only have a few weeks left to comply with the company’s new policy, which requires CAs to adhere to the CA/Browser Forum Baseline Requirements and provide proof of audits of their subordinate...

foreman-proxy SSL verification issue

Foreman Security reports: The smart proxy when running in an SSL-secured mode permits incoming API calls to any endpoint without requiring, or performing any verification of an SSL client certificate. This permits any client with access to the API to make requests and perform actions permitting...

PT-2014-5152

Name of the Vulnerable Software and Affected Versions libwww-perl LWP::Protocol::https module versions 6.04 through 6.06 Description The issue allows attackers to disable server certificate validation via the HTTPS CA DIR or HTTPS CA FILE environment variable when using IO::Socket::SSL as the SSL...

CA ERwin Web Portal 9.5 Multiple Directory Traversals

CA ERwin Web Portal version 9.5 with a build date before March 20, 2014 was detected on the remote host. This version contains multiple directory traversal vulnerabilities that an attacker could use to access sensitive information, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable...

Ruby OpenSSL CA私钥伪造漏洞

Bugtraq ID:66956 CVE ID:CVE-2014-2734 Yukihiro Matsumoto Ruby是一款功能强大的面向对象的脚本语言。 Yukihiro Matsumoto Ruby OpenSSL存在一个安全漏洞，允许攻击者利用漏洞伪造CA私钥。 0 Ruby 目前没有详细解决方案： http://www.ruby-lang.org/ require 'rubygems' require 'openssl' require 'digest/md5' key = OpenSSL::PKey::RSA.new2048 cipher =...

CA ERwin Web Portal MIMM ProfileIconServlet Multiple Information Disclosure Vulnerabilities

This vulnerability allows remote attackers to read arbitrary files on a system with vulnerable installations of CA ERwin Web Portal's Meta Integration Metadata Management service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the "Meta Integration W...