Fedora Update for pki-core FEDORA-2012-20243

Check for the Version of pki-core OpenVAS Vulnerability Test Fedora Update for pki-core FEDORA-2012-20243 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 16 Update: pki-core-9.0.25-1.fc16

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D || ABOUT "CERTIFICATE SYSTEM" || =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D Certificate System CS is an enterprise software system...

Fedora Update for pki-core FEDORA-2012-20220

Check for the Version of pki-core OpenVAS Vulnerability Test Fedora Update for pki-core FEDORA-2012-20220 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: pki-core-9.0.25-1.fc17

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D || ABOUT "CERTIFICATE SYSTEM" || =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D Certificate System CS is an enterprise software system...

[SECURITY] Fedora 18 Update: pki-core-10.0.0-2.fc18

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D || ABOUT "CERTIFICATE SYSTEM" || =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D Certificate System CS is an enterprise software system...

Moderate: Red Hat Security Advisory: pki security update

Updated pki-common and pki-tps packages that fix multiple security issues are now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

pki-tps: Connection reset when performing empty certificate search in TPS

The token processing system pki-tps in Red Hat Certificate System RHCS before 8.1.3 allows remote attackers to cause a denial of service Apache httpd web server child process restart via certain unspecified empty search fields in a user certificate search query...

System: Multiple cross-site scripting flaws by displaying CRL or processing profile

Multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 pageStart or 2 pageSize to the displayCRL script, or 3 nonce variable to the profileProcess script...

CVE-2012-3367

Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority CA certificate...

CVE-2012-2662

Multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the 1 System Agent or 2 End Entity pages...

Authentication flaw

Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority CA certificate...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the 1 System Agent or 2 End Entity pages...

CVE-2012-3367

Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority CA certificate...

CVE-2012-2662

CVE-2012-2662 affects Red Hat Certificate System (RHCS) and Dogtag Certificate System. The vulnerability enables multiple cross-site scripting (XSS) in the web interface via unspecified parameters on the System Agent and End Entity pages, allowing remote attackers to inject arbitrary scripts/HTML...

CVE-2012-3367

CVE-2012-3367 affects Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System. Root cause: the web interface failed to properly validate certificate revocation requests, allowing an agent with permissions to revoke end-entity certificates to revoke the CA certificate. Impact:...

CVE-2012-2662

Multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the 1 System Agent or 2 End Entity pages...

PT-2012-4167 · Red Hat +1 · Dogtag Certificate System +3

Name of the Vulnerable Software and Affected Versions: Red Hat Certificate System versions prior to 8.1.1 Dogtag Certificate System affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to...

System: multiple XSS flaws

Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System Agent and End Entity pages. An attacker could use these flaws to perform a cross-site scripting XSS attack against victims using the Certificate System's web interface...

Moderate: Red Hat Security Advisory: pki security and enhancement update

Updated pki-common, pki-tps and pki-util packages that fix multiple security issues and add one enhancement are now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

Trojan Dropper Uses Valid Certificate Issued For Swiss Company

A pair of trojan droppers affiliated with a pay-per-click scam are using valid digital signatures from a certificate that was issued for a Swiss company, according to a report on Securelist. Between December 2011 and March 7, 2012, the Kaspersky Security Network has detected around 5,000 instance...