Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)

The CERTDecodeCertPackage function in Mozilla Network Security Services NSS, as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial ...

Moderate: Red Hat Security Advisory: nss, nss-util, nss-softokn, and nspr security update

Updated nss, nss-util, nss-softokn, and nspr packages that fix two security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...

Fedora 18 : stunnel-4.55-1.fc18 (2013-4243)

new upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1924-1)

Jeff Gilbert, Henrik Skupin, Ben Turner, Christian Holler, Andrew McCreight, Gary Kwong, Jan Varga and Jesse Ruderman discovered multiple memory safety issues in Firefox. If the user were tricked in to opening a specially crafted page, an attacker could possibly exploit these to cause a denial of...

Hackers can steal Windows Phone passwords using Wi-Fi vulnerability

Microsoft has warned that a vulnerability in Windows Phone operating systems could allow hackers to access your login credentials. The vulnerability resides in a Wi-Fi authentication scheme known as PEAP-MS-CHAPv2, which Windows Phones use to access wireless networks protected by version 2 of the...

Hackers can steal Windows Phone passwords using Wi-Fi vulnerability

Microsoft has warned that a vulnerability in Windows Phone operating systems could allow hackers to access your login credentials. The vulnerability resides in a Wi-Fi authentication scheme known as PEAP-MS-CHAPv2, which Windows Phones use to access wireless networks protected by version 2 of the...

nspr, nss security update

CentOS Errata and Security Advisory CESA-2013:1135 Updated nss and nspr packages that fix two security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

nss: TLS CBC padding timing attack

The TLS implementation in Mozilla Network Security Services NSS does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attac...

Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)

The CERTDecodeCertPackage function in Mozilla Network Security Services NSS, as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial ...

Fedora 18 : squid-3.2.13-1.fc18 (2013-13493)

This is security update that fixes CVE-2013-4123 and CVE-2013-4115. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 19 : gksu-polkit-0.0.3-8.gitf8ce834c.fc19 (2013-13620)

Recreate tarball from proper sources; previous package was shipping an unknown code tarball. - Add proper patching for CVE-2012-5617/CVE-2013-4161, the previous fix was creating a patch file and not patching the code. - Use proper bus name in service file to fix service timeout. Note that Tenable...

Fedora 18 : WebCalendar-1.2.7-1.fc18 (2013-13454)

Tue Jul 23 2013 Patrick Monnerat 1.2.7-1 - New upstream release security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Karotz Smart Rabbit 12.07.19.00 - Multiple Vulnerabilities

Karotz Smart Rabbit 12.07.19.00 - Multiple Vulnerabilities Trustwave SpiderLabs Security Advisory TWSL2013-021: Multiple Vulnerabilities in Karotz Smart Rabbit Published: 08/01/13 Version: 1.0 Vendor: Electronic Arts http://www.ea.com/, formerly Mindscape, formerly Violet Product: Karotz Version...

Cisco Web Security Appliance Version

The remote host is running Cisco Web Security Appliance WSA, a web gateway security appliance. It is possible to get the WSA version number via SSH or HTTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69081; scriptversion"1.11";...

Cisco Prime Network / Wireless Control System Health Monitor Detection

The web interface for Cisco Prime Network / Wireless Control System Health Monitor was detected on the remote host. Health Monitor is used to manage the high availability implementation for Network / Wireless Control System. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Prime Network / Wireless Control System Health Monitor Reflected XSS

The version of Health Monitor a component of Cisco Prime Network / Wireless Control System hosted on the remote web server is affected by a reflective cross-site scripting vulnerability. Input to the 'requestUrl' parameter is not properly sanitized. An attacker could exploit this by tricking a us...

Cisco ONS Detection

Based on the SNMP sysDesc value returned from the remote host, it is a Cisco Optical Networking System device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69058; scriptversion"1.4"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"Cisco ONS Detection";...

Cisco TelePresence Multipoint Control Unit Detection

Nessus determined that the remote host is a multipoint control unit video teleconferencing device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69046; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-1908-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. CVE-2013-1500, CVE-2013-2454, CVE-2013-2458 A vulnerability was discovered in the OpenJDK Javadoc related to...

Fedora 18 : file-roller-3.6.4-1.fc18 (2013-12653)

This update fixes CVE-2013-4668 : The File Roller archive manager for the GNOME desktop suffers from a path traversal vulnerability caused by insufficient path sanitization. A specially crafted archive file can be used to trigger creation of arbitrary files in any location, writable by the user...