DSA-1719-1 gnutls13 - certificate validation

Bulletin has no description...

CentOS 3 / 4 / 5 : bind (CESA-2009:0020)

Updated Bind packages to correct a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name...

CVE-2009-0265

CVE-2009-0265 affects BIND 9.6.0 and earlier, where the server does not properly check the return value of OpenSSL EVP_VerifyFinal, allowing remote attackers to bypass certificate-chain validation via a malformed SSL/TLS signature. The description notes this is similar to CVE-2008-5077 and CVE-20...

Gentoo Security Advisory GLSA 200901-10 (gnutls)

The remote host is missing updates announced in advisory GLSA 200901-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mandrake Security Advisory MDVSA-2009:007 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:007. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mandrake Security Advisory MDVSA-2009:007 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:007. OpenVAS Vulnerability Test $Id: mdksa2009007.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:007 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Gentoo Security Advisory GLSA 200901-10 (gnutls)

The remote host is missing updates announced in advisory GLSA 200901-10. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gale EVP_VerifyFinal() Security Bypass Vulnerability

The host is running Gale and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbgalesecbypassvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Gale EVPVerifyFinal Security Bypass Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Gale EVP_VerifyFinal() Security Bypass Vulnerability

Gale is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0126

The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing BOINC 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a...

DEBIAN-CVE-2009-0126

The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing BOINC 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a...

CVE-2009-0125

NOTE: this issue has been disputed by the upstream vendor. nasl/naslcrypto2.c in the Nessus Attack Scripting Language library aka libnasl 2.2.11 does not properly check the return value from the OpenSSL DSAdoverify function, which allows remote attackers to bypass validation of the certificate...

CVE-2009-0126

The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing BOINC 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a...

DEBIAN-CVE-2009-0127

M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to...

CVE-2009-0128

plugins/crypto/openssl/cryptoopenssl.c in Simple Linux Utility for Resource Management aka SLURM or slurm-llnl does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS...

CVE-2009-0128

plugins/crypto/openssl/cryptoopenssl.c in Simple Linux Utility for Resource Management aka SLURM or slurm-llnl does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS...

DEBIAN-CVE-2009-0130

lib/crypto/csrc/cryptodrv.c in erlang does not properly check the return value from the OpenSSL DSAdoverify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a package...

CVE-2009-0128

Technical details for CVE-2009-0128 are not publicly available in the provided documents. Monitor for updates.

CVE-2009-0126

Technical details for CVE-2009-0126 are not present in the provided connected documents. The materials do not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2009-0129

libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSAverify and DSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...