[SECURITY] Fedora 16 Update: openconnect-3.18-1.fc16

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

[SECURITY] Fedora 15 Update: openconnect-3.18-1.fc15

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

Fedora Update for mozilla-https-everywhere FEDORA-2012-7175

Check for the Version of mozilla-https-everywhere OpenVAS Vulnerability Test Fedora Update for mozilla-https-everywhere FEDORA-2012-7175 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Fedora Update for mozilla-https-everywhere FEDORA-2012-7136

Check for the Version of mozilla-https-everywhere OpenVAS Vulnerability Test Fedora Update for mozilla-https-everywhere FEDORA-2012-7136 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Fedora 16 : mozilla-https-everywhere-2.0.3-2.fc16 (2012-7136)

Fix a possible SSL downgrade vulnerability. Fix upstream bug 5676, which fixes an SSL downgrade attack. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Fedora 15 : mozilla-https-everywhere-2.0.3-2.fc15 (2012-7175)

Fix a possible SSL downgrade vulnerability. Fix upstream bug 5676, which fixes an SSL downgrade attack. Fix upstream bug 5676, which fixes an SSL downgrade attack. Fix upstream bug 5676, which fixes an SSL downgrade attack. Fix upstream bug 5676, which fixes an SSL downgrade attack. Fix upstream...

Debian DSA-2464-2 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2012-0467 Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory...

Fedora Update for mozilla-https-everywhere FEDORA-2012-7175

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mozilla-https-everywhere FEDORA-2012-7136

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: mozilla-https-everywhere-2.0.3-2.fc15

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to...

[SECURITY] Fedora 16 Update: mozilla-https-everywhere-2.0.3-2.fc16

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to...

[SECURITY] Fedora 17 Update: mozilla-https-everywhere-2.0.3-2.fc17

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to...

Fedora 15 : rubygems-1.7.2-5.fc15 (2012-6414)

With this new rubygems, HTTPS connection no longer redirects to HTTP. Also now rubygems verify SSL connection. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 16 : rubygems-1.8.11-3.fc16.1 (2012-6409)

With this new rubygems, HTTPS connection no longer redirects to HTTP. Also now rubygems verify SSL connection. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

CVE-2012-2441

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

Session fixation

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

CVE-2012-2441

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

CVE-2012-2441

CVE-2012-2441 affects RuggedCom Rugged Operating System (ROS) versions prior to 3.3. A factory account password is derived from the MAC Address in the device banner, enabling remote attackers to gain access by authenticating via SSH or HTTPS. Related entry CVE-2012-1803 covers similar behavior en...

CVE-2012-2441: Weak Password Requirements

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

PT-2012-4047

Name of the Vulnerable Software and Affected Versions RuggedCom Rugged Operating System ROS versions prior to 3.3 Description The issue allows remote attackers to obtain access by calculating a password derived from the MAC Address field in a banner, and then establishing a SSH or HTTPS session...