PT-2012-6134 · Mozilla +1 · Zamboni +1

Name of the Vulnerable Software and Affected Versions: Zamboni affected versions not specified Description: The issue is related to the contribution feature in Zamboni, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the...

RubyGems https vulnerabilities

Insufficient certificate validation, redirection to insecure protocols...

freeradius security update

2.1.12-4 - resolves: bug855316 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

freeradius2 security update

2.1.12-4 - resolves: bug855315 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

DEBIAN-CVE-2012-1177

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofed certificate...

CVE-2012-1177

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofed certificate...

CVE-2012-1177

CVE-2012-1177 affects libgdata before 0.10.2 and 0.11.x before 0.11.1. The issue is that libgdata did not validate SSL certificates, enabling MITM attackers to obtain user names and passwords via spoofed certificates. Public advisories and patch notes indicate vulnerable builds include libgdata l...

CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

DEBIAN-CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

Authentication flaw

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

CVE-2012-2132

CVE-2012-2132 affects libsoup 2.32.2 and earlier. The flaw: libsoup does not validate certificates or clear the trust flag when the ssl-ca-file is missing, allowing a remote attacker to bypass authentication by using an SSL connection. Publicly documented impact is a certificate/trust bypass rath...

Debian Security Advisory DSA 2482-1 (libgdata)

The remote host is missing an update to libgdata announced via advisory DSA 2482-1. OpenVAS Vulnerability Test $Id: deb24821.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2482-1 libgdata Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Cisco AnyConnect Secure Mobility Client IPsec Certificate Validation Vulnerability

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks. The vulnerability exists because the affected software does not perform certificate name checking in an X.509 certificate when the software i...

Scientific Linux Security Update : nspr and nss for SL 5.x on i386/x86_64

CVE-2009-2409 deprecate MD2 in SSL cert validation Kaminsky CVE-2009-2408 firefox/nss: doesn't handle NULL in Common Name properly CVE-2009-2404 nss regexp heap overflow The packages with this update are identical to the packages released on the 20th of July 2009. They are being reissued as a...

Scientific Linux Security Update : ruby on SL5.x, SL4.x i386/x86_64

A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. CVE-2006-6303 An SSL certificate validation flaw w...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVSA-2012:111 libgdata Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2012-1850 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.13 Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description: The issue arises from improper processing of the return value of the openssl verify function in mnet/xmlrpc/client.php...