RedHat Update for ipa-client RHSA-2013:0189-01

Check for the Version of ipa-client OpenVAS Vulnerability Test RedHat Update for ipa-client RHSA-2013:0189-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RHEL 6 : ipa (RHSA-2013:0188)

Updated ipa packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS Update for ipa-client CESA-2013:0189 centos5

Check for the Version of ipa-client OpenVAS Vulnerability Test CentOS Update for ipa-client CESA-2013:0189 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Important: Red Hat Security Advisory: ipa security update

Updated ipa packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

Mozilla Products: Multiple vulnerabilities

Background Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the ‘Mozilla...

CVE-2012-0738

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate...

CVE-2012-4898

CVE-2012-4898 affects Tropos Networks’ Mesh OS prior to 7.9.1.1. The vulnerability stems from insufficient entropy used to generate SSH host keys, enabling a remote attacker to perform a Man-in-the-Middle attack by exploiting knowledge of non-unique keys from another installation. Impact includes...

Fedora 17 : libsocialweb-0.25.21-1.fc17 (2012-17749)

CVE-2012-4511: libsocialweb untrusted connection to flickr The libsocialweb library is prone to a security vulnerability that allows attackers to perform man-in-the-middle attacks. Remote attackers can exploit this issue to gain access to sensitive information or modify the integrity of user...

CVE-2012-5825

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library...

Code injection

The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5822

The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of...

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

Gentoo Security Advisory GLSA 201210-01 (w3m)

The remote host is missing updates announced in advisory GLSA 201210-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Windows Phone7 < 7.10.8107 Out-of-Date SSL Certificate Blacklist

Binary data windowsphone7108107.nbin...

CVE-2012-2993

Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the 1 POP3, 2 IMAP, or 3 SMTP protocol via an arbitrary valid certificate...

Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)

The host is installed with Microsoft Windows operating system and is prone to digital certificate key length spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmscertificatekeylengthspoofingvuln.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Minimum Certificate Key Length Spoofing...

Citadel Malware Used to Infiltrate Airport VPN

The Citadel Trojan is really starting to become kind of a pain in the neck. Not content to sit by and watch while its more well-known rivals Zeus and SpyEye get all the attention, the Citadel malware has begun showing up in some interesting places, with the latest example being the discovery of t...

Gentoo Security Advisory GLSA 201206-34 (msmtp)

The remote host is missing updates announced in advisory GLSA 201206-34. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)

This host is installed with Microsoft Windows operating system and is prone to Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmsunauthdigitalcertspoofingvuln.nasl 8323 2018-01-08 14:50:05Z gveerendra $ Microsoft Unauthorized Digital Certificates Spoofing Vulnerability 2728973 Authors:...