Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)

This host is missing a critical security update according to Microsoft Bulletin MS12-025. OpenVAS Vulnerability Test $Id: secpodms12-025.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2671605 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...

Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)

This host is missing a critical security update according to Microsoft Bulletin MS11-086. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows活动目录LDAPS身份验证绕过漏洞(MS11-086)

CVE ID: CVE-2011-2014 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用绕过安全限制。 此漏洞源于由于无法根据CRL验证与域账号相关的SSL证书的撤销状态，活动目录在配置为使用LDAP over SSL（非默认设置）时存在错误。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft Windows...

RHEL 6 : openssl (RHSA-2011:1409)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1409 advisory. - openssl: CRL verification vulnerability CVE-2011-3207 Note that Nessus has not tested for this issue but has instead relied only on the application...

openssl: CRL verification vulnerability

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

Moderate: Red Hat Security Advisory: openssl security update

Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

openssl security update

1.0.0-10.5 - initialize the X509STORECTX properly for CRL lookups - CVE-2011-3207 736087...

Code injection

libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list CRL, which allows remote attackers to execute arbitrary code or cause a denial of service application crash a crafted 1 web site or 2 e-mail...

CVE-2011-3227

CVE-2011-3227 affects macOS X before 10.7.2, specifically the libsecurity component. The issue arises from improper error handling when processing a nonstandard CRL extension, which can allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted...

Medium: openssl

Issue Overview: An uninitialized variable use flaw was found in OpenSSL. This flaw could cause an application using the OpenSSL Certificate Revocation List CRL checking functionality to incorrectly accept a CRL that has a nextUpdate date in the past. All OpenSSL users should upgrade to these...

GLSA-201110-01 : OpenSSL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-01 OpenSSL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could cause a Denial of...

OpenSSL: Multiple vulnerabilities

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers referenced...

Mandriva Update for openssl MDVSA-2011:137 (openssl)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : openssl (MDVSA-2011:137)

Multiple vulnerabilities has been discovered and corrected in openssl : The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary...

CVE-2011-3207

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

CVE-2011-3207

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

Design/Logic Flaw

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

CVE-2011-3207

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

CVE-2011-3207

CVE-2011-3207 affects OpenSSL 1.0.x before 1.0.0e; OpenSSL x509_vfy.c may leave members uninitialized, enabling bypass of CRL validation by using a past nextUpdate. Connected documents (IBM/F5/other vendors) enumerate CVE-2011-3207 among OpenSSL vulnerabilities and recommend upgrading to fixed Op...

CVE-2011-3207

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...