Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

SuSE 10 Security Update : neon (ZYPP Patch Number 6549)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers. CVE-2009-2408 Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

Mandriva Linux Security Advisory : rootcerts (MDVSA-2010:029)

The rootcerts package was added in Mandriva in 2005 and was meant to be updated when nessesary. The provided rootcerts packages has been upgraded using the latest certdata.txt file from the mozilla cvs repository, as of 2009/12/03. In Mandriva a number of additional CA root certificates has been...

VideoLAN VLC Media Player 0.8.6 a/b/c/d (Win32 Universal) - '.ass' Local Buffer Overflow

/%VLC vs 0.6.8 bcda .ASS file buffer overflow exploitwin32 universal %Works every time,works on any win32 OS,tested on Windows xp sp2. %My doctor said that I have seriuouse problems ,but I think he's full of it because the voices tell me I'm ok!/ include include include define File...

SLES11: Security update for libneon

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libneon27 neon More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText:...

SLES10: Security update for neon

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: neon More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES10: Security update for neon

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: neon More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

openSUSE Security Update : libneon-devel (libneon-devel-1377)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers CVE-2009-2408. Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

openSUSE Security Update : libneon-devel (libneon-devel-1377)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers CVE-2009-2408. Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

SuSE 10 Security Update : neon (ZYPP Patch Number 6548)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers. CVE-2009-2408 Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

CentOS Security Advisory CESA-2009:1452 (neon)

The remote host is missing updates to neon announced in advisory CESA-2009:1452. CESA-2009:1452 64986 4 $Id: ovcesa20091452.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1452 neon Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1452 (neon)

The remote host is missing updates to neon announced in advisory CESA-2009:1452. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2009:1452

The remote host is missing updates announced in advisory RHSA-2009:1452. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections,...

RedHat Security Advisory RHSA-2009:1452

The remote host is missing updates announced in advisory RHSA-2009:1452. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections,...

RHEL 4 / 5 : neon (RHSA-2009:1452)

Updated neon packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : neon, neon27 vulnerabilities (USN-835-1)

Joe Orton discovered that neon did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracted...

USN-835-1: neon vulnerabilities

Joe Orton discovered that neon did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

Moderate: Red Hat Security Advisory: neon security update

Updated neon packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level...

neon: billion laughs DoS attack

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

neon: Improper verification of x509v3 certificate with NULL (zero) byte in certain fields

neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate...