7954 matches found
Microsoft WinHTTP服务证书验证漏洞（MS09-013）
BUGTRAQ ID: 34437 CVECAN ID: CVE-2009-0089 Microsoft Windows是微软发布的非常流行的操作系统。 当应用程序调用Windows HTTP服务与远程Web服务器创建连接时，WinHTTP仅对主机试图连接的原始站点的证书验证URL是否为完全合格的域名，特定的DNS欺骗攻击可能将连接转发到拥有该特定主机有效证书但不是WinHTTP初始化连接所到页面有效证书的不同Web服务器上，这可能导致WinHTTP错误的认为远程 Web服务器的证书为可接受。由于WinHTTP的用户交互依赖于应用程序，因此用户可能不会得到上述差异的警告。 Microso...
PT-2009-2789 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing issue exists due to incomplete validation of the distinguished name in a digital certificate. This can be combined with other attacks, such as DNS spoofing, allowin...
Microsoft WinHTTP Server Name Mismatch Certificate Validation Security Bypass Vulnerability
Description Microsoft Windows HTTP Services WinHTTP is prone to a security-bypass vulnerability because of an error in verifying website certificates. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further...
GLSA-200904-05 : ntp: Certificate validation error
The remote host is affected by the vulnerability described in GLSA-200904-05 ntp: Certificate validation error It has been reported that ntp incorrectly checks the return value of the EVPVerifyFinal, a vulnerability related to CVE-2008-5077 GLSA 200902-02. Impact : A remote attacker could exploit...
Gentoo Security Advisory GLSA 200904-05 (ntp)
The remote host is missing updates announced in advisory GLSA 200904-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
ntp: Certificate validation error
Background ntp contains the client and daemon implementations for the Network Time Protocol. Description It has been reported that ntp incorrectly checks the return value of the EVPVerifyFinal, a vulnerability related to CVE-2008-5077 GLSA 200902-02. Impact A remote attacker could exploit this...
Ubuntu: Security Advisory (USN-675-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200902-02 (openssl)
The remote host is missing updates announced in advisory GLSA 200902-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
GLSA-200902-02 : OpenSSL: Certificate validation error
The remote host is affected by the vulnerability described in GLSA-200902-02 OpenSSL: Certificate validation error The Google Security Team reported that several functions incorrectly check the result after calling the EVPVerifyFinal function, allowing a malformed signature to be treated as a goo...
OpenSSL: Certificate validation error
Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description The Google Security Team reported that several functions incorrectly check the result after calling the...
[SECURITY] [DSA 1719-1] New gnutls13 packages fix certificate validation
------------------------------------------------------------------------ Debian Security Advisory DSA-1719-1 [email protected] http://www.debian.org/security/ Florian Weimer February 10, 2009 http://www.debian.org/security/faq -...
DSA-1719-1 gnutls13 - certificate validation
Bulletin has no description...
CentOS 3 / 4 / 5 : bind (CESA-2009:0020)
Updated Bind packages to correct a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name...
CVE-2009-0265
CVE-2009-0265 affects BIND 9.6.0 and earlier, where the server does not properly check the return value of OpenSSL EVP_VerifyFinal, allowing remote attackers to bypass certificate-chain validation via a malformed SSL/TLS signature. The description notes this is similar to CVE-2008-5077 and CVE-20...
Gentoo Security Advisory GLSA 200901-10 (gnutls)
The remote host is missing updates announced in advisory GLSA 200901-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Mandrake Security Advisory MDVSA-2009:007 (ntp)
The remote host is missing an update to ntp announced via advisory MDVSA-2009:007. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Mandrake Security Advisory MDVSA-2009:007 (ntp)
The remote host is missing an update to ntp announced via advisory MDVSA-2009:007. OpenVAS Vulnerability Test $Id: mdksa2009007.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:007 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Gentoo Security Advisory GLSA 200901-10 (gnutls)
The remote host is missing updates announced in advisory GLSA 200901-10. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Gale EVP_VerifyFinal() Security Bypass Vulnerability
The host is running Gale and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbgalesecbypassvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Gale EVPVerifyFinal Security Bypass Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Gale EVP_VerifyFinal() Security Bypass Vulnerability
Gale is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...