SSLv3 Protocol vulnerability‘POODLE’to fix the related concepts-vulnerability warning-the black bar safety net

2 0 1 4 years 1 0 On 1 5 December, Google released a report about the SSLv3 “POODLE”of the high-risk vulnerability vulnerability number CVE-2 0 1 4-3 5 6 6 A brief analysis of the report. According to Google's statement, the vulnerability across all of the SSLv3 version, the use of the...

TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack

NCCIC / US-CERT National Cyber Awareness System: TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack 10/17/2014 12:27 PM EDT Original release date: October 17, 2014 Systems Affected All systems and applications utilizing the Secure Socket Layer SSL 3.0 with cipher-block chaining CBC mode...

Mozilla Firefox < 33.0 Multiple Vulnerabilities

Binary data 8553.prm...

CVE-2014-6996

The Martial Arts Battle Card aka com.tapenjoy.zjh.tw application 1.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7001

The Jian Ren aka cn.sh.scustom.janren application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6961

The SudaniNet aka com.sudaninet.wtwqiqbegqbtwlda application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The HydFM aka com.apheliontechnologies.hydfm application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The JJ Texas Hold'em Poker aka cn.jj.poker application 1.13.23.HD for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The MiWay Insurance Ltd aka com.MiWay.MD application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7034

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6972

The Kazakhstan Radio aka com.wordbox.kazakhstanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6980

The LINE PLAY aka jp.naver.lineplay.android application 2.3.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6967

The Albion College aka com.vivomobile.albioncollege application 2.1.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7045

The Bust Out Bail aka com.onesolutionapps.bustoutbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6977

The eLearn aka com.desire2learn.campuslife.chattanoogastate.edu.directory application 1.0.649.1194 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7050

The givenu give aka com.givenu.give application 1.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6949

The Akne Ernahrung aka com.rareartifact.akneernahrung72010074 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6950

The Mt. Airy News aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148 application 1.0069.b0069 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Firefox < 33.0 Multiple Vulnerabilities (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is a version prior to 33.0. It is, therefore, affected by the following vulnerabilities : - Multiple memory safety flaws exist within the browser engine. Exploiting these, an attacker can cause a denial of service or execute arbitrary...