T-Mobile Wi-Fi Calling App vulnerable to Man-in-the-Middle attack

T-Mobile devices having a default Wi-Fi Calling feature that keeps you connected in areas with little or no coverage using Wi-Fi connection. But according to new finding by students Jethro Beekman and Christopher Thompson from University of California Berkeley, that this feature lets millions of...

T-Mobile Wi-Fi Calling App vulnerable to Man-in-the-Middle attack

T-Mobile devices having a default Wi-Fi Calling feature that keeps you connected in areas with little or no coverage using Wi-Fi connection. But according to new finding by students Jethro Beekman and Christopher Thompson from University of California Berkeley, that this feature lets millions of...

T-Mobile Fixes Man-in-the-Middle Vulnerability in Wi-Fi Calling App

UPDATE: The default “Wi-Fi Calling” feature on T-Mobile devices that lets milllions of Android users make phone calls over a wireless Internet connection contained a vulnerability that could have been exploited to perform man-in-the-middle MiTM attacks. Graduate students Jethro Beekman and...

[SSLyze v0.6] SSL Server Configuration Scanning Tool

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers. Features SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility...

CentOS Update for emacs-git CESA-2013:0589 centos6

Check for the Version of emacs-git OpenVAS Vulnerability Test CentOS Update for emacs-git CESA-2013:0589 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS 6 : git (CESA-2013:0589)

Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Moderate: Red Hat Security Advisory: git security update

Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Fedora 18 : git-1.8.1.4-1.fc18 (2013-2829)

This update fixes CVE-2013-0308 Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 17 : git-1.7.11.7-3.fc17 (2013-2763)

This update fixes CVE-2013-0308 Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

CVE-2012-6093

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...

CVE-2012-6093

The CVE-2012-6093 issue affects Qt's QSslSocket::sslErrors across Qt versions (pre-4.6.5; pre-4.7.6 for 4.7.x; pre-4.8.5 for 4.8.x) when used with certain OpenSSL versions. It arises from an incompatible structure layout that can read memory from the wrong location, causing Qt to report an incorr...

CVE-2012-6093

Removed by vendor...

CVE-2012-6093

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...

CVE-2013-0963

CVE-2013-0963 affects Apple iOS Identity Services. An error handling flaw causes an AppleID to be treated as the empty string if certificate validation fails, potentially allowing a physically proximate attacker to bypass authentication. Apple addressed this in iOS 6.1 (HT5642). Connected sources...

freeradius2 security and bug fix update

2.1.12-5 - resolves: bug855308 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

CVE-2012-6461

The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service...

CVE-2012-6461

The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service...

CVE-2012-6461

Opera: CVE-2012-6461 concerns the X.509 certificate-validation in Opera’s HTTPS implementation. Affected: Opera before 12.10. Description: remote attackers could cause a false indication of revocation-status success by triggering a failure of a single checking service. Mitigation: upgrade to a ne...

CVE-2012-0741

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate...