APPLE-SA-2013-05-16-1 iTunes 11.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...

CVE-2007-6746

CVE-2007-6746 affects telepathy-idle before 0.1.15, where SSL certificate validation is incomplete: (1) issuer trusted-CA check bypassed, (2) hostname not strictly validated against CN, and (3) certificate expiration date not verified. This enables potential MITM attacks by presenting arbitrary v...

iTunes < 11.0.3 Multiple Vulnerabilities

Binary data 6831.prm...

Apple iTunes < 11.0.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.0.3. It is, therefore, affected by multiple vulnerabilities : - An error exists related to certificate validation. A man-in-the-middle attacker can exploit this to spoof HTTPS servers, which allows the disclosure of sensitive...

Apple iTunes < 11.0.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.0.3. It therefore is potentially affected by several issues : - An error exists related to certificate validation that could allow disclosure of sensitive information and could allow the application to trust data fr...

iTunes < 11.0.3 Certificate Validation Vulnerability (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is earlier than 11.0.3 and is, therefore, affected by an information disclosure vulnerability related to certificate validation. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66500; scriptversion"1.8";...

Ubuntu Update for telepathy-idle USN-1821-1

Check for the Version of telepathy-idle OpenVAS Vulnerability Test $Id: gbubuntuUSN18211.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for telepathy-idle USN-1821-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Ubuntu 12.04 LTS / 12.10 / 13.04 : telepathy-idle vulnerability (USN-1821-1)

It was discovered that telepathy-idle did not perform any server certificate validation when using SSL connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information. Note that Tenable Network Securit...

USN-1821-1: telepathy-idle vulnerability

It was discovered that telepathy-idle did not perform any server certificate validation when using SSL connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information...

ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability

ESA-2013-035.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability EMC Identifier: ESA-2013-035 CVE Identifier: CVE-2013-0945 Severity Rating: CVSS v2 Base Score: 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C Affected products: EMC Avamar...

EMC Avamar server / client security vulnerabilities

Unauthorized files access, insufficient certificate validation...

Code injection

EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Fedora 17 : telepathy-idle-0.1.15-1.fc17 (2013-6557)

This release validate TLS certificates properly, preventing man-in-the-middle attacks. This will be a regression for users of IRC-over-SSL servers/proxies that do not have a certificate trusted by system-wide CA configuration; they will no longer be able to connect. If someone implements fd.o...

RHEL 6 : Subscription Asset Manager (RHSA-2013:0686)

Red Hat Subscription Asset Manager 1.2.1, which fixes several security issues, multiple bugs, and adds various enhancements, is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

MediaWiki 1.19.x < 1.19.4 / 1.20.x < 1.20.3 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities : - A flaw exists related to certificate validation due to the server hostname not being verified to match a domain name in the Common Name CN or SubjectAltName o...

Mozilla Thunderbird Multiple Vulnerabilities -01 (Apr 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0240

Gnome Online Accounts GOA 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the...

DEBIAN-CVE-2013-0240

Gnome Online Accounts GOA 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the...

CVE-2013-1799

CVE-2013-1799 affects GNOME Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, where GOA does not properly validate SSL certificates for providers using libsoup, allowing a man‑in‑the‑middle to exfiltrate credentials. The issue is noted as stemming from an incomplete fix for CVE-20...

PT-2013-3398 · Gnome · Gnome Online Accounts +1

Name of the Vulnerable Software and Affected Versions: Gnome Online Accounts GOA versions 3.6.x through 3.6.2 Gnome Online Accounts GOA versions 3.7.x through 3.7.90 Description: The issue is related to the improper validation of SSL certificates when creating accounts for providers who use the...