530 matches found
SuSE 11.2 Security Update : libfreebl3 (SAT Patch Number 8648)
Mozilla NSS has been updated to the 3.15.3.1 security release. The update blacklists an intermediate CA that was abused to create man in the middle certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...
RHEL 6 : ca-certificates (RHSA-2013:1866)
An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. This package contains the set of CA certificates chosen by the Mozilla Foundation for use...
CentOS 6 : ca-certificates (CESA-2013:1866)
An updated ca-certificates package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. This package contains the set of CA certificates chosen by the Mozilla Foundation for use...
Mozilla Thunderbird < 24.2 Multiple Vulnerabilities
Binary data 8071.prm...
Firefox ESR 24.x < 24.2 Multiple Vulnerabilities
The installed version of Firefox ESR 24.x is earlier than 24.2, and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2013-5609, CVE-2013-5610 - Two...
Firefox 26 Makes Java Plugins Click-to-Play, Fixes 14 Security Flaws
Mozilla has released a major new version of Firefox, which includes fixes for more than a dozen security vulnerabilities as well as an important change that makes all Java plugins click-to-play be default. This feature prevents those plugins from running automatically on Web pages, which helps...
Mis-issued ANSSI/DCSSI certificate — Mozilla
Google notified Mozilla that an intermediate certificate, which chains up to a root included in Mozilla’s root store, was loaded into a man-in-the-middle MITM traffic management device. This certificate was issued by Agence nationale de la sécurité des systèmes d'information ANSSI, an agency of t...
French Government Impersonates Google Digital Certificate
Google last week revoked digital certificates for some of its domains that had been fraudulently signed by an intermediate certificate authority with links to France’s cyber-defense agency. The Agence Nationale de la Sécurité des Systèmes d’Information ANSSI claims that the spoofed Google...
Certificate update
Security Certificate update Share December 9th, 2013 Last week we became aware of the existence of several unauthorized security certificates, issued in violation of rules for creation of such certificates. The certificates chained back to a French certificate authority, ANSSI, and had been signe...
Oracle Linux 6 : nspr / nss / nss-util (ELSA-2013-0213)
From Red Hat Security Advisory 2013:0213 : Updated nss, nss-util, and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Netwo...
Zoom X4 / X5 SQL Injection / Authentication Bypass Vulnerabilities
Zoom X4 and X5 modems suffers from authentication bypass and remote SQL injection vulnerabilities. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3...
RedHat Update for nss and nspr RHSA-2013:0214-01
Check for the Version of nss and nspr OpenVAS Vulnerability Test RedHat Update for nss and nspr RHSA-2013:0214-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for nspr CESA-2013:0213 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20130131)
It was found that a Certificate Authority CA mis-issued two intermediate certificates to customers. These certificates could be used to launch man-in- the-middle attacks. This update renders those certificates as untrusted. This covers all uses of the certificates, including SSL, S/MIME, and code...
CentOS Update for nspr CESA-2013:0214 centos5
Check for the Version of nspr OpenVAS Vulnerability Test CentOS Update for nspr CESA-2013:0214 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS 6 : nspr (CESA-2013:0213)
Updated nss, nss-util, and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of...
nspr, nss security update
CentOS Errata and Security Advisory CESA-2013:0214 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2013-January/081380.html Affected packages: nspr nspr-devel nss nss-devel nss-pkcs11-devel nss-tools Upstream details at:...
nss: Dis-trust TURKTRUST mis-issued *.google.com certificate
REJECTED CVE TURKTRUST, a certificate authority in Mozilla’s root program, had mis-issued two intermediate certificates to customers. One of the certificates was used for man-in-the-middle MITM traffic management of domain names that the customer did not legitimately own or control. An intermedia...