CVE-2004-0758

CVE-2004-0758 affects Mozilla 1.5 through 1.7. A CA certificate can be imported even when its distinguished name (DN) matches the built‑in CA root certificate, which allows remote attackers to cause a denial of service on SSL pages because the malicious certificate is treated as invalid. The Open...

CVE-2004-0758

Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid...

RHEL 2.1 : up2date (RHSA-2003:268)

New versions of the up2date and rhnregister clients are available and are required for continued access to Red Hat Network. The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. This erratum includes an updated RHNS-CA-CERT file,...

RHEL 2.1 : up2date (RHSA-2003:177)

Updated versions of the rhnregister and up2date packages are now available. The new packages include many bug fixes, and a few new features. The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates...

mozilla -- built-in CA certificates may be overridden

Under some situations, Mozilla will automatically import a certificate from an email message or web site. This behavior can be used as a denial-of-service attack: if the certificate has a distinguished name DN identical to one of the built-in Certificate Authorities CAs, then Mozilla will no long...

SOL3066 - OpenSSH buffer management vulnerability - CA-2003-24

For information about this vulnerability, refer to...

CA Unicenter TNG buffer overflow

Few network services are vulnerable to stack overflow...

CVE-2003-0998

Technical details about CVE-2003-0998 are not publicly provided in the connected documents. No affected versions, root cause, or remediation are specified here. Monitor for updates in case new details are released.

CVE-2003-0996

CVE-2003-0996 concerns an unknown “System Security Vulnerability” in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 that could allow a local attacker to gain privileges via the help interface. The NVD entry assigns a CVSSv2 base score of 4.6 (MEDIUM) with LOCAL attack vector and part...

CVE-2003-0997

CVE-2003-0997 refers to an unknown denial-of-service flaw in Computer Associates’ Unicenter Remote Control (URC) 6.0. The vulnerability allows an attacker to trigger CPU consumption in the URC host service, potentially impacting availability. Public detail is limited in the provided documents; a ...

Internet explorer (and others) CA certificate attack

For intermediate CA only signature is checked, missed check for basic constaint allows to use any valid certificate as CA certificate...

CA Unicenter password recovery

It's possible to recover original password...

(RHSA-2003:177) Updated up2date and rhn_register clients available

The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates improvements in handling package dependencies and "obsoletes" processing, along with many other bug fixes. This release also includes an updated...

R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7 Advisory R7-0009 Vulnerabilities in SSH2 Implementations from Multiple...

CA BrightStor ARCserve Backup Agent Credential Disclosure

The remote host has an accessible ARCSERVE$ share. Several versions of ARCserve store the backup agent username and password in a plaintext file on this share. An attacker may use this flaw to obtain the password file of the remote backup agent, and use it to gain privileges on this host. C Tenab...

Computer Associates MLink "mclear" command vulnerable to buffer overflow via long string of characters

Overview A locally exploitable buffer overflow exists in mclear. Description CA-MLINK is a managed data transport service. For more information about CA-MLINK, please see the product brochure. Based on a public report, it appears there is a locally exploitable buffer overflow in the mclear comman...

Computer Associates MLink "mllock" command vulnerable to buffer overflow via long string of characters

Overview A locally exploitable buffer overflow exists in mllock. Description CA-MLINK is a managed data transport service. For more information about CA-MLINK, please see the product brochure. Based on a public report, it appears there is a locally exploitable buffer overflow in the mllock comman...

Advisory CA-2001-18

CERT Advisory CA-2001-18 Multiple Vulnerabilities in Several Implementations of the Lightweight Directory Access Protocol LDAP Original release date: July 16, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected iPlanet Directory...

CA's InoculateIT Agent for Exchange Server

Hi, I'm new in the list, my 1st msg: The CA's InoculateIT Agent for Exchange Server cannot detect some messages that have the SMTP headers changed. In October/1999 I reported it to local CA support office, but still now nothing have done. Guys at [email protected] seem to ignore my messages. The bug...