Lucene search
K

4556 matches found

OSV
OSV
added 2008/05/20 12:0 a.m.36 views

DSA-1581-1 gnutls13 - potential code execution

Bulletin has no description...

10CVSS9.3AI score0.199EPSS
Exploits3
CERT
CERT
added 2008/05/15 12:0 a.m.84 views

Debian and Ubuntu OpenSSL packages contain a predictable random number generator

Overview A vulnerability in the OpenSSL package included with the Debian GNU/Linux operating system and its derivatives may cause weak cryptographic keys to be generated. Description A weakness exists in the random number generator used by the OpenSSL package included with the Debian GNU/Linux...

7.8CVSS6.5AI score0.04353EPSS
Exploits6References8
OSV
OSV
added 2008/05/13 12:0 a.m.49 views

DSA-1571-1 openssl - predictable random number generator

Bulletin has no description...

9.3CVSS6.9AI score0.12512EPSS
Exploits8
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.22 views

Debian Security Advisory DSA 1333-1 (libcurl3-gnutls)

The remote host is missing an update to libcurl3-gnutls announced via advisory DSA 1333-1. OpenVAS Vulnerability Test $Id: deb13331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1333-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.5CVSS0.1AI score0.00635EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.18 views

Debian Security Advisory DSA 986-1 (gnutls11)

The remote host is missing an update to gnutls11 announced via advisory DSA 986-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library, which is also present and used in GnuTLS, the GNU implementation for Transport Laye...

7.5CVSS0.3AI score0.03721EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.10 views

Debian: Security Advisory (DSA-986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.03721EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.13 views

Debian: Security Advisory (DSA-1333-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.00635EPSS
Exploits0References3
ALT Linux
ALT Linux
added 2007/12/23 12:0 a.m.19 views

Security fix for the ALT Linux 9 package wireshark version 0.99.7-alt1

Dec. 23, 2007 Sir Raorn 0.99.7-alt1 - 0.99.7 + CVE-2007-6451 + CVE-2007-6450 + CVE-2007-6441 + CVE-2007-6439 + CVE-2007-6438 + CVE-2007-6121 + CVE-2007-6120 + CVE-2007-6119 + CVE-2007-6118 + CVE-2007-6117 + CVE-2007-6116 + CVE-2007-6115 + CVE-2007-6114 + CVE-2007-6113 + CVE-2007-6112 +...

10CVSS7.1AI score0.08646EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/11/10 12:0 a.m.17 views

Ubuntu 6.06 LTS / 6.10 / 7.04 : curl vulnerability (USN-484-1)

It was discovered that the GnuTLS certificate verification methods implemented in Curl did not check for expiration and activation dates. When performing validations, tools using libcurl3-gnutls would incorrectly allow connections to sites using expired certificates. Note that Tenable Network...

7.5CVSS5.4AI score0.00635EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2007/07/23 12:0 a.m.22 views

Debian DSA-1333-1 : libcurl3-gnutls - missing input validation

It has been discovered that the GnuTLS certificate verification methods implemented in libcurl-gnutls, a solid, usable, and portable multi-protocol file transfer library, did not check for expired or invalid dates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

7.5CVSS5.2AI score0.00635EPSS
Exploits0References2
securityvulns
securityvulns
added 2007/07/19 12:0 a.m.25 views

curl TLS certificates spoofing

Certificate's activation adn expire dates are not checked if GnuTLS verification method is used...

7.5CVSS2.2AI score0.00635EPSS
Exploits0Affected Software1
Debian
Debian
added 2007/07/18 8:9 p.m.20 views

[SECURITY] [DSA 1333-1] New libcurl3-gnutls packages fix certificate handling

------------------------------------------------------------------------ Debian Security Advisory DSA-1333 [email protected] http://www.debian.org/security/ Steve Kemp July 18th, 2007 - ------------------------------------------------------------------------ Package : libcurl3-gnutls...

7.5CVSS6AI score0.00635EPSS
Exploits0
Prion
Prion
added 2007/07/18 5:30 p.m.15 views

Design/Logic Flaw

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

7.5CVSS6.8AI score0.00635EPSS
Exploits0References11Affected Software1
NVD
NVD
added 2007/07/18 5:30 p.m.9 views

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

7.5CVSS6.6AI score0.00635EPSS
Exploits0References11
UbuntuCve
UbuntuCve
added 2007/07/18 5:30 p.m.12 views

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

7.5CVSS5.9AI score0.00635EPSS
Exploits0References2
OSV
OSV
added 2007/07/18 5:30 p.m.3 views

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

7.5CVSS6.5AI score0.00635EPSS
Exploits0References14
Cvelist
Cvelist
added 2007/07/18 5:0 p.m.19 views

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

6.4AI score0.00635EPSS
Exploits0References11
CVE
CVE
added 2007/07/18 5:0 p.m.82 views

CVE-2007-3564

CVE-2007-3564 affects libcurl versions 7.14.0–7.16.3 built with GnuTLS, where certificate expiration/activation dates are not checked, enabling bypass of access restrictions. Connected advisories note fixed packages: Debian/etch update to curl libcurl3-gnutls (e.g., 7.15.5-1etch1) and Ubuntu/Debi...

7.5CVSS6.4AI score0.00635EPSS
Exploits0References11Affected Software1
Debian CVE
Debian CVE
added 2007/07/18 5:0 p.m.17 views

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

7.5CVSS6.4AI score0.00635EPSS
Exploits0
OSV
OSV
added 2007/07/18 12:0 a.m.13 views

DSA-1333-1 curl

Bulletin has no description...

7.5CVSS6.3AI score0.00635EPSS
Exploits0
Rows per page
Query Builder