Are Some Certificate Authorities Too Big To Fail?

In the wake of this weekend’s revelations of the seriousness of the attack on certificate authority DigiNotar, security experts have renewed criticism of the Internet’s digital certificate infrastructure, with some wondering if larger certificate authorities CAs might be too big to fail...

Unfixed XSS vulnerability at forum.electronicwerkstatt.de

Security researcher cAs, has submitted on 09/06/2011 a cross-site-scripting XSS vulnerability affecting forum.electronicwerkstatt.de, which at the time of submission ranked 35692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

How to secure SSL connections and remove DigiNotar certificates from the Trusted CAs list

...

MS11-044: Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)

The JIT compiler included with the version of the .NET Framework installed on the remote host incorrectly validates certain values within an object. An attacker may be able to leverage this vulnerability to run arbitrary code as the logged in user or the user account of ASP.NET on the affected...

Debian Security Advisory DSA 2172-1 (moodle)

The remote host is missing an update to moodle announced via advisory DSA 2172-1. OpenVAS Vulnerability Test $Id: deb21721.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2172-1 moodle Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2172-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in phpCAS, a CAS client library for PHP. The Moodle course management system includes a copy of phpCAS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Fedora Update for php-pear-CAS FEDORA-2010-15796

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-15796 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-pear-CAS FEDORA-2010-15796

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-pear-CAS FEDORA-2010-12320

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-12320 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-pear-CAS FEDORA-2010-12320

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-pear-CAS FEDORA-2010-15970

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-pear-CAS FEDORA-2010-15943

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-pear-CAS FEDORA-2010-15943

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-15943 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-pear-CAS FEDORA-2010-15970

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-15970 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

[SECURITY] Fedora 12 Update: php-pear-CAS-1.1.3-1.fc12

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 13 Update: php-pear-CAS-1.1.3-1.fc13

This package is a PEAR library for using a Central Authentication Service...

Fedora 14 : php-pear-CAS-1.1.3-1.fc14 (2010-15796)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

Directory traversal

Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU PGTiou parameter...

Fedora Update for php-pear-CAS FEDORA-2010-12247

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...