[SECURITY] Fedora 27 Update: milkytracker-1.01.00-1.fc27

MilkyTracker is an application for creating music in the .MOD and .XM forma ts. Its goal is to be free replacement for the popular Fasttracker II software...

[SECURITY] Fedora 26 Update: milkytracker-1.01.00-1.fc26

MilkyTracker is an application for creating music in the .MOD and .XM forma ts. Its goal is to be free replacement for the popular Fasttracker II software...

UBUNTU-CVE-2011-4973

Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...

PT-2018-4043

Name of the Vulnerable Software and Affected Versions mod nss version 1.0.8 Description The issue allows remote attackers to bypass authentication and assume the identity of a valid user. This is achieved by using the user's certificate and entering 'password' as the password. Recommendations For...

Google Android 'ih264d_ref_idx_reordering' function remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. libavc is a library for controlling audio and video devices. A remote code execution vulnerability exists in the 'ih264drefidxreordering' function of libavc in Android, which stem...

Apache mod-gnutls Certificate Spoofing Vulnerability

Apache mod-gnutls is an extension to Apache httpd which provides HTTPS services through the use of the GnuTLS library from the Apache Software Foundation USA. A security vulnerability exists in Apache mod-gnutls that stems from the program's failure to validate client certificates. A remote...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

Design/Logic Flaw

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

Summary: CVE-2009-5144 affects the Apache mod-gnutls module, which integrates GnuTLS with Apache HTTP Server. The vulnerability is that mod-gnutls does not validate client certificates when the directory context is configured with "GnuTLSClientVerify require", allowing a remote attacker to spoof ...

CVE-2009-5144: Undefined Security Weakness

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

PT-2018-4021

Name of the Vulnerable Software and Affected Versions mod-gnutls affected versions not specified Description The issue concerns the validation of client certificates. When "GnuTLSClientVerify require" is set in a directory context, mod-gnutls fails to validate client certificates, allowing remote...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

Removed by vendor...

PT-2018-5690

Name of the Vulnerable Software and Affected Versions: ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10 C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers affected versions not specified Description: T...

PT-2019-2795

Name of the Vulnerable Software and Affected Versions ProFTPD versions up to 1.3.5b Description The issue is related to an arbitrary file copy vulnerability in the mod copy module of ProFTPD, allowing for remote code execution and information disclosure without authentication. This can be exploit...

httpd: mod_ssl NULL pointer dereference

A NULL pointer dereference flaw was found in the httpd's modssl module. A remote attacker could use this flaw to cause an httpd child process to crash if another module used by httpd called a certain API function during the processing of an HTTPS request...

httpd: mod_ssl NULL pointer dereference

A NULL pointer dereference flaw was found in the httpd's modssl module. A remote attacker could use this flaw to cause an httpd child process to crash if another module used by httpd called a certain API function during the processing of an HTTPS request...

httpd: mod_ssl NULL pointer dereference

A NULL pointer dereference flaw was found in the httpd's modssl module. A remote attacker could use this flaw to cause an httpd child process to crash if another module used by httpd called a certain API function during the processing of an HTTPS request...