36 matches found
CVE-2011-3227: Improper Input Validation
libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list CRL, which allows remote attackers to execute arbitrary code or cause a denial of service application crash a crafted 1 web site or 2 e-mail...
CVE-2010-1802
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a certificate associated with a similar domain name, as demonstrated by use of a www.example.con...
Design/Logic Flaw
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a certificate associated with a similar domain name, as demonstrated by use of a www.example.con...
CVE-2010-1802
This CVE (CVE-2010-1802) affects Apple Mac OS X 10.5.8 and 10.6.4 libsecurity, where domain-name comparisons in X.509 certificates can be bypassed, enabling MITM with a certificate for a similar domain (e.g., www.example.con to spoof www.example.com). Root cause: improper domain-name comparison i...
CVE-2010-1802
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a certificate associated with a similar domain name, as demonstrated by use of a www.example.con...
Apple Releases Security Update 2010-005
Apple has released security update 2010-005 to address multiple vulnerabilities affecting the ATS, CFNetwork, ClamAV, CoreGraphics, libsecurity, PHP, and Samba applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a...
CVE-2010-1802: Improper Authentication
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a certificate associated with a similar domain name, as demonstrated by use of a www.example.con...
Mac OS X Multiple Vulnerabilities (Security Update 2010-005)
The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-005 applied. This security update contains fixes for the following products : - ATS - CFNetwork - ClamAV - CoreGraphics - libsecurity - PHP - Samba C Tenable Network Security, Inc. if...
Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities
Binary data 800795.prm...
Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...
HP-UX Security Patch : PHCO_32773
VVOS libsecurity patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26301; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX PHCO_24852 : HPSBUX0109-166 Sec. Vulnerability in libsecurity (VVOS) (rev.1)
s700800 11.04 VVOS libsecurity patch : Security Vulnerability in libsecurity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24852. The text itself is copyright C Hewlett-Packard Development Company, L.P...
CVE-2001-1136
The libsecurity library in HP-UX 11.04 VVOS allows attackers to cause a denial of service...
CVE-2001-1136
CVE-2001-1136 affects the libsecurity library in HP-UX 11.04 (VVOS). The vulnerability is described as allowing a denial of service. The connected sources confirm the affected component (libsecurity) and the impact (denial of service) with a low overall severity (CVSS2 base score ~2.1, LOCAL acce...