SuSE 11.1 Security Update : libfreebl3 (SAT Patch Number 5138)

This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read : MFSA 2011-34 - update to 3.12.10 - root CA changes - filter certain bogus certs bmo642815 - fix minor memory leaks - other bugfixes - update to...

SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 7746)

This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read: MFSA 2011-34 - update to 3.12.10 o root CA changes o filter certain bogus certs bmo642815 o fix minor memory leaks o other bugfixes - update to 3.12...

CA SiteMidner crossite scripting

login.fcc crossite scripting...

CA20111208-01: Security Notice for CA SiteMinder

CA20111208-01: Security Notice for CA SiteMinder Issued: December 08, 2011 CA Technologies Support is alerting customers to a potential risk in CA SiteMinder. A vulnerability exists that can allow a malicious user to execute a reflected cross site scripting XSS attack. CA Technologies has issued...

Site of Dutch CA Gemnet Offline After Web Server Attack

Another certificate authority in The Netherlands has been hacked, though this time the attack does not appear to have affected the certificate-issuing operations of Gemnet, a subsidiary of KPN. The company, which does business with the Dutch government among other organizations, said it has taken...

CVE-2011-4054

Cross-site scripting XSS vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter...

CVE-2011-4054

CVE-2011-4054 affects CA SiteMinder (login.fcc) where insufficient validation of the postpreservationdata parameter enables cross-site scripting (XSS). Reported for CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8; vendor remediation patches were issued to address the vulnerability: R6 SP6 ...

CVE-2011-4054

Cross-site scripting XSS vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter...

PT-2011-4832

Name of the Vulnerable Software and Affected Versions CA SiteMinder R6 SP6 before CR7 CA SiteMinder R12 SP3 before CR8 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter in the login.fcc...

CVE-2011-4054: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter...

CA eTrust Directory SNMP Packet Parsing Denial of Service

Binary data 6104.prm...

CA eTrust Directory SNMP Packet Parsing Denial of Service

CA eTrust Directory, a directory service application, is installed on the remote host. Versions of CA eTrust Directory 8.1 and R12 earlier than service pack 7 CR1 are potentially affected by a denial of service vulnerability due to the way the application parses SNMP packets. A remote,...

CA Directory buffer overflow

Buffer overflow on SNMP-packet parsing...

CA20111116-01: Security Notice for CA Directory

-----BEGIN PGP SIGNED MESSAGE----- CA20111116-01: Security Notice for CA Directory Issued: November 16, 2011 CA Technologies Support is alerting customers to a potential risk with CA Directory. A vulnerability exists that can allow a remote attacker to cause a denial of service condition...

CVE-2011-3849

Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP packet...

Design/Logic Flaw

Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP packet...

CVE-2011-3849

Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service daemon crash via a crafted SNMP packet...

CVE-2011-3849

The CVE-2011-3849 issue affects CA Directory and CA eTrust Directory (dxserver) before build 6279 (SP7 CR1 for r12). The root cause is insufficient bounds checking in SNMP packet parsing, enabling remote, unauthenticated attackers to trigger a denial of service (daemon crash) via crafted SNMP tra...

PT-2011-4725

Name of the Vulnerable Software and Affected Versions CA Directory versions prior to 8.1 6279 CA Directory r12 versions prior to SP7 CR1 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SNMP packet. Recommendations For C...