486 matches found
PT-2012-6129 · Codehaus · Xfire
Name of the Vulnerable Software and Affected Versions: Codehaus XFire versions 1.2.6 and earlier Description: The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because it does not verify that the server hostname matches a domain name in the...
CVE-2011-0633
The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...
HylaFAX hfaxd unauthorized fax access
During authorization of fax access by hostname, hostname sent by remote side is used...
[SECURITY] [DSA 634-1] New hylafax packages fix unauthorised access
-------------------------------------------------------------------------- Debian Security Advisory DSA 634-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 634-1] New hylafax packages fix unauthorised access
-------------------------------------------------------------------------- Debian Security Advisory DSA 634-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq -...