RedHat Security Advisory RHSA-2009:1185

The remote host is missing updates announced in advisory RHSA-2009:1185. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Moxie Marlinspike reported a heap overflow flaw in a regular expression parser in the NSS library provided by SeaMonkey...

RedHat Security Advisory RHSA-2009:1184

The remote host is missing updates announced in advisory RHSA-2009:1184. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

Ubuntu: Security Advisory (USN-810-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Security Advisory RHSA-2009:1207

The remote host is missing updates to Netscape Portable Runtime NSPR and Network Security Services NSS announced in advisory RHSA-2009:1207. These updated packages upgrade NSS from the previous version, 3.12.2, to a prerelease of version 3.12.4. The version of NSPR has also been upgraded from 4.7...

Mandrake Security Advisory MDVSA-2009:197 (nss)

The remote host is missing an update to nss announced via advisory MDVSA-2009:197. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Ubuntu: Security Advisory (USN-810-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-810-2 (fixed)

The remote host is missing an update to fixed announced via advisory USN-810-2. Original advisory details: Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of...

RedHat Security Advisory RHSA-2009:1186

The remote host is missing updates announced in advisory RHSA-2009:1186. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

RedHat Security Advisory RHSA-2009:1185

The remote host is missing updates announced in advisory RHSA-2009:1185. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Moxie Marlinspike reported a heap overflow flaw in a regular expression parser in the NSS library provided by SeaMonkey...

Fedora Core 10 FEDORA-2009-8288 (perl-Gtk2-MozEmbed)

The remote host is missing an update to perl-Gtk2-MozEmbed announced via advisory FEDORA-2009-8288. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

RedHat Security Advisory RHSA-2009:1190

The remote host is missing updates announced in advisory RHSA-2009:1190. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

Ubuntu USN-810-1 (nss)

The remote host is missing an update to nss announced via advisory USN-810-1. OpenVAS Vulnerability Test $Id: ubuntu8101.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8101.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-810-1 nss Authors: Thomas Reinke...

Mandrake Security Advisory MDVSA-2009:197 (nss)

The remote host is missing an update to nss announced via advisory MDVSA-2009:197. OpenVAS Vulnerability Test $Id: mdksa2009197.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:197 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1184

The remote host is missing updates announced in advisory RHSA-2009:1184. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

RedHat Security Advisory RHSA-2009:1190

The remote host is missing updates announced in advisory RHSA-2009:1190. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

Microsoft IE 8 Shines in Web Browser Security Test

From Network World Ellen Messmer Microsoft’s Internet Explorer 8 rated tops among five browsers tested by NSS Labs for effectiveness in protecting against malware and phishing attacks — though NSS Labs acknowledges Microsoft paid for the tests. Nevertheless, the test process, which lasted over a...

deprecate MD2 in SSL cert validation (Kaminsky)

The Network Security Services NSS library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash...

Multiple Products NSS Library Buffer Overflow Vulnerability

This host is installed with Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmultprdtsnsslibbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Multiple Products NSS Library...

Multiple Products NSS Library Buffer Overflow Vulnerability

Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mandriva Linux Security Advisory : nss (MDVSA-2009:197-3)

Security issues in nss prior to 3.12.3 could lead to a man-in-the-middle attack via a spoofed X.509 certificate CVE-2009-2408 and md2 algorithm flaws CVE-2009-2409, and also cause a denial-of-service and possible code execution via a long domain name in X.509 certificate CVE-2009-2404. This updat...