Scientific Linux Security Update : ruby on SL5.x, SL4.x i386/x86_64

A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. CVE-2006-6303 An SSL certificate validation flaw w...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVSA-2012:111 libgdata Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libgdata MDVSA-2012:111 (libgdata)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2012-1850 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.13 Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description: The issue arises from improper processing of the return value of the openssl verify function in mnet/xmlrpc/client.php...

Debian DSA-2482-1 : libgdata - insufficient certificate validation

Vreixo Formoso discovered that libgdata, a library used to access various Google services, wasn't validating certificates against trusted system root CAs when using an HTTPS connection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

CVE-2011-4409

CVE-2011-4409 affects the Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS, where the client fails to properly validate SSL certificates, enabling a remote attacker to perform a MITM to spoof a server and read/modify sensitive data. Connected sources (Ubuntu Security Notices US...

Ubuntu Update for ubuntuone-client USN-1465-1

Ubuntu Update for Linux kernel vulnerabilities USN-1465-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14651.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubuntuone-client USN-1465-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu Update for ubuntu-sso-client USN-1464-1

Ubuntu Update for Linux kernel vulnerabilities USN-1464-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14641.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubuntu-sso-client USN-1464-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : ubuntuone-storage-protocol update (USN-1465-2)

USN-1465-1 fixed a vulnerability in the Ubuntu One Client. This update adds a required fix to the Ubuntu One storage protocol library. It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a...

Ubuntu 10.04 LTS : ubuntuone-client regression (USN-1465-3)

USN-1465-1 fixed vulnerabilities in Ubuntu One Client. The update failed to install on certain Ubuntu 10.04 LTS systems that had a legacy Python 2.5 package installed. This update fixes the problem. We apologize for the inconvenience. It was discovered that the Ubuntu One Client incorrectly...

USN-1465-1: Ubuntu One Client vulnerability

It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information...

[SECURITY] [DSA 2482-1] libgdata security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2482-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 2, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2482-1] arpwatch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2482-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 2, 2012 http://www.debian.org/security/faq -...

postgresql: MITM due improper x509_v3 CN validation during certificate verification

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters...

CVE-2012-1244

The CVE-2012-1244 entry concerns the NTT DOCOMO sp mode mail application for Android (versions 5400 and earlier). The vulnerability is that the app does not properly verify SSL X.509 certificates from servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information ...

CVE-2011-3061

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

Ubuntu: Security Advisory (USN-1295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for dovecot USN-1295-1

Ubuntu Update for Linux kernel vulnerabilities USN-1295-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12951.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for dovecot USN-1295-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...