419 matches found
Design/Logic Flaw
OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority...
CVE-2010-1378
OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority...
GLSA-200905-03 : IPSec Tools: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200905-03 IPSec Tools: Denial of Service The following vulnerabilities have been found in the racoon daemon as shipped with IPSec Tools: Neil Kettle reported that racoon/isakmpfrag.c is prone to a NULL pointer dereference...
Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks
Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...
CVE-2009-0161
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate...
CVE-2009-0161
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate...
HP-UX Update for Apache HPSBUX01232
Check for the Version of Apache OpenVAS Vulnerability Test HP-UX Update for Apache HPSBUX01232 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
Microsoft Windows Security Support Provider SChannel Spoofing (MS09-007; CVE-2009-0085)
SSP is a dynamic-link library DLL that implements a common interface between transport-level applications and security providers by making one or more security packages available to applications.Security packages support security protocols such as Kerberos authentication and Secure Channel SChann...
Debian Security Advisory DSA 851-1 (openvpn)
The remote host is missing an update to openvpn announced via advisory DSA 851-1. Several security related problems have been discovered in openvpn, a Virtual Private Network daemon. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2531 Wrong processing...
CVE-2007-4594
Entrust Entelligence Security Provider ESP 8 does not properly validate certificates in certain circumstances involving 1 a chain that omits the root Certification Authority CA certificate, or an application that specifies disregarding 2 unknown revocation statuses during path validation or 3...
GLSA-200509-12 : Apache, mod_ssl: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200509-12 Apache, modssl: Multiple vulnerabilities modssl contains a security issue when 'SSLVerifyClient optional' is configured in the global virtual host configuration CAN-2005-2700. Also, Apache's httpd includes a PCRE library...
Apache, mod_ssl: Multiple vulnerabilities
Background The Apache HTTP server is one of the most popular web servers on the Internet. modssl provides SSL v2/v3 and TLS v1 support for Apache 1.3 and is also included in Apache 2. Description modssl contains a security issue when "SSLVerifyClient optional" is configured in the global virtual...
DEBIAN-CVE-2005-2531
OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial o...
CVE-2005-2531
OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial o...
ContivitySystem.txt
Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...
Privilege escalation in Nortel Contivity VPN Client V05_01.030
Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...
Important: Red Hat Security Advisory: ipsec-tools security update
An updated ipsec-tools package that fixes verification of X.509 certificates in racoon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and...
Security Update for Windows 2000 (KB917736)
A security issue has been identified in Microsoft Windows-based systems that could allow an attacker to impersonate a valid client while accessing resources that require certificate authentication over RPC. You can help protect your computer by installing this update from Microsoft. After you...
