9 matches found
EUVD-2013-2709
Malware in sbrugna...
CVE-2013-2770
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...
SUSE CVE-2013-2770
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...
CVE-2013-2770
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...
Design/Logic Flaw
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...
CVE-2013-2770
The CVE-2013-2770 issue affects the Novell Kanaka component prior to version 2.8 used with Novell Open Enterprise Server (OES) on macOS. The root cause is that SSL sessions do not verify the server’s X.509 certificate, enabling MITM attackers to spoof servers with an arbitrary certificate. This r...
CVE-2013-2770
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...
CVE-2013-2770: Improper Input Validation
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...
PT-2013-3920
Name of the Vulnerable Software and Affected Versions Novell Open Enterprise Server OES versions prior to 2.8 Description The issue concerns the installation functionality in the Novell Kanaka component, which fails to verify the server's X.509 certificate during an SSL session. This allows...