Error "The server certificate could not be checked for revocation as required by your SSL policy settings. No certificate revocation providers could be loaded."

When trying to launch published application on Mac machine, we get an error"The server certificate could not be checked for revocation as required by your SSL policy settings. No certificate revocation providers could be loaded."...

September 11, 2018—KB4457128 (OS Build 17134.285)

None None...

Error : Certificate is Referenced by a CRL, OCSP Responder, vserver" When Deleting a Cert-key

Error : Certificate is referenced by a CRL, OCSP responder, vserver when trying to delete a cert-key even though it is not bound to any vserver , no links , OCSP present. Symptoms : The Citrix ADC may have broken the cert links and unlinked the certificate from vservers while attempting to delete...

XenMobile Error :"Certificate not trusted -Cannot connect to company's network "

After putting XMS FQDN in the Secure Hub we get error "Certificate not trusted - We cannot connect securely to your company's network" LOG ANALYSIS : Below error message indicates that there is an issue with incorrect certificate uploaded under the NetScaler offload configuration. ",RECEIVERUI,IN...

Unable to Upload SAML certificate: Error : The Certificate Format is Invalid

Error in the Debug Logs : 2017-05-05T06:36:42.281-0700 | 9079446C4AA9B629 | INFO | http-nio-14443-exec-7 | com.citrix.controlpoint.rest.CertificateMgmtResource | Uploading certificate to be used As : saml . none indicates server cert 2017-05-05T06:36:42.296-0700 | 9079446C4AA9B629 | ERROR |...

Warning message on storefront console "There are no certificates associated with this storefront server."

...

MariaDB 10.1.0 < 10.1.10 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.10 advisory. - The sslverifyservercert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before...

Apple Patches Dozens of Flaws in iOS 8.4, OS X 10.10.4

Apple has released new versions of iOS and OS X, both of which include a significant number of security patches, several for bugs that can lead to remote code execution and other serious issues. Version 8.4 of iOS contains fixes for more than 30 security vulnerabilities, including bugs in the iOS...

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...

Threat Outbreak Alert RuleID15158: Email Messages Distributing Malicious Software on May 7, 2015

Medium Alert ID: 38751 First Published: 2015 May 8 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15158 may contain the following files: Name | Size ...

CVE-2015-3008

Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert11, and 13.1 before 13.1-cert2, when registering a SIP TLS device, does not properly handle a null byte in a domain nam...

CVE-2013-0289

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2009-5138

GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different...

CVE-2013-4111

The Python client library for Glance python-glanceclient before 0.10.0 does not properly check the preverifyok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate and allows...

CVE-2007-6746

telepathy-idle before 0.1.15 does not verify 1 that the issuer is a trusted CA, 2 that the server hostname matches a domain name in the subject's Common Name CN, or 3 the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid...

Mozilla SeaMonkey 2.x < 2.12 Multiple Vulnerabilities

Binary data 801356.prm...

Fedora 14 : perl-IO-Socket-SSL-1.37-1.fc14 (2010-19058)

This update fixes a problem whereby IO::Socket::SSL fell back to the 'VERIFYNONE' verification mode if another verification mode was defined but no valid cafile or capath was provided. The updated version throws an error in that situation rather than proceeding with the connection despite being...

CVE-2010-2074

istream.c in w3m 0.5.2 and possibly other versions, when sslverifyserver is enabled, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...

Mandriva Update for kdelibs4 MDVA-2010:024 (kdelibs4)

Check for the Version of kdelibs4 OpenVAS Vulnerability Test Mandriva Update for kdelibs4 MDVA-2010:024 kdelibs4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2009-3942

Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted...