1429 matches found
CVE-2012-5783
Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...
Gentoo Security Advisory GLSA 201210-01 (w3m)
The remote host is missing updates announced in advisory GLSA 201210-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Windows Phone7 < 7.10.8107 Out-of-Date SSL Certificate Blacklist
Binary data windowsphone7108107.nbin...
CVE-2012-2993
Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the 1 POP3, 2 IMAP, or 3 SMTP protocol via an arbitrary valid certificate...
Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)
The host is installed with Microsoft Windows operating system and is prone to digital certificate key length spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmscertificatekeylengthspoofingvuln.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Minimum Certificate Key Length Spoofing...
Citadel Malware Used to Infiltrate Airport VPN
The Citadel Trojan is really starting to become kind of a pain in the neck. Not content to sit by and watch while its more well-known rivals Zeus and SpyEye get all the attention, the Citadel malware has begun showing up in some interesting places, with the latest example being the discovery of t...
Gentoo Security Advisory GLSA 201206-34 (msmtp)
The remote host is missing updates announced in advisory GLSA 201206-34. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)
This host is installed with Microsoft Windows operating system and is prone to Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmsunauthdigitalcertspoofingvuln.nasl 8323 2018-01-08 14:50:05Z gveerendra $ Microsoft Unauthorized Digital Certificates Spoofing Vulnerability 2728973 Authors:...
CVE-2012-3372
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...
Cisco AnyConnect Secure Mobility Client 3.0 < 3.0 MR8 Multiple Vulnerabilities
The remote host has a version of Cisco AnyConnect 3.0 MR8. Such versions are affected by the following vulnerabilities : - The HostScan VPN downloader implementation does not compare timestamps of offered software to install with currently installed software, which may allow remote attackers to...
GLSA-201206-32 : Links: SSL verification vulnerability
The remote host is affected by the vulnerability described in GLSA-201206-32 Links: SSL verification vulnerability A SSL verification vulnerability and two unspecified vulnerabilities have been discovered in Links. Please review the Secunia Advisory referenced below for details. Impact : An...
Flame Malware Spread Via Rogue Microsoft Security Certificates
Flame Malware Spread Via Rogue Microsoft Security Certificates Microsoft released an emergency Windows update on Sunday after revealing that one of its trusted digital signatures was being abused to certify the validity of the Flame malware that has infected computers in Iran and other Middle...
Researchers Unveil New Way to Trust Certificates
Two independent researchers are proposing an extension for TLS to provide greater trust in certificate authorities, which have become a weak link in the entire public key infrastructure after some big breaches involving fraudulent SSL certificates. TACK, short for Trust Assertions for Certificate...
CVE-2012-0732
The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Debian: Security Advisory (DSA-2352-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 16 Update: ettercap-0.7.4-3.fc16
Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols even ciphered ones and includes many feature for network and ho st...
Low: Red Hat Security Advisory: JBoss Enterprise Web Platform 5.1.2 update
JBoss Enterprise Web Platform 5.1.2, which fixes one security issue, various bugs, and adds several enhancements is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS ba...
Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update
JBoss Enterprise Application Platform 5.1.2, which fixes two security issues, various bugs, and adds several enhancements is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System...
Intercepter-NG New Sniffing Tool
Intercepter-NG New Sniffing Tool Intercepter-NG offers the following features: + Sniffing passwords\hashes of the types: ICQ\IRC\AIM\FTP\IMAP\POP3\SMTP\LDAP\BNC\SOCKS\HTTP\WWW\NNTP\CVS\TELNET\MRA\DC++\VNC\MYSQL\ORACLE + Sniffing chat messages of ICQ\AIM\JABBER\YAHOO\MSN\IRC\MRA +...
