Fedora 13 : amsn-0.98.3-1.fc13 (2010-7291)

fixes security problem caused by not validating ssl certicates, als add new features because of a new upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Update for amsn FEDORA-2010-7378

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0744

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

CVE-2010-0744

The CVE-2010-0744 issue affects amsn (aka Alvaro's Messenger) 0.98.3 and earlier, where SSL hostname verification is absent, allowing MITM impersonation of an MSN server with an arbitrary certificate. OpenVAS and Fedora NASL entries corroborate that updates were released (e.g., amsn-0.98.3-2.fc11...