CVE-2009-0051

Public details for CVE-2009-0051 are not provided in the connected documents. Technical specifics (affected product/version/root cause/impact) are not available here—monitor for updates from vendors and advisories.

CVE-2009-0048

OpenEvidence 1.0.6 and earlier are affected by CVE-2009-0048 due to not properly checking the return value from OpenSSL EVP_VerifyFinal, enabling remote attackers to bypass certificate-chain validation via a malformed SSL/TLS signature for DSA and ECDSA keys. Root cause: failed validation check i...

CVE-2009-0050

Technical details for CVE-2009-0050 are not publicly available in the provided documents. Monitor for updates.

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

DEBIAN-CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

CVE-2009-0021

CVE-2009-0021 affects NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150, where OpenSSL EVP_VerifyFinal return value is not properly checked, allowing remote attackers to bypass SSL/TLS certificate-chain validation for DSA/ECDSA keys. The issue is similar to CVE-2008-5077. Remediation details in...

OpenSSL Incorrect checks for malformed signatures

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

Opera < 9.63 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.63 and thus reportedly affected by several issues : - It may be possible to execute arbitrary code on the remote system by manipulating certain text-area contents. 920 - It may be possible to crash the remote browser using certai...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Linux)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnlin900022.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Linux Authors: Chanda...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Linux

Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...

stunnel protection bypass

Revoked certificate status is incorrectly checked...

Firefox self signed certificate flaw

Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure

source: https://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically triggered when validating X.509 certificates. Successful exploits allow attackers to...

[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1412-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1411-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1410-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

DSA-1411-1 libopenssl-ruby - possible man-in-the-middle attacks

Bulletin has no description...

CVE-2007-4680

CVE-2007-4680 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.10. The flaw is in CFNetwork certificate validation, enabling a remote attacker to perform a man‑in‑the‑middle attack to spoof trusted SSL certificates and potentially leak credentials or other information. The issue is mitigated by ...

RHEL 5 : ruby (RHSA-2007:0965)

Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. An SSL certifica...