CVE-2010-3902

CVE-2010-3902 affects OpenConnect; the issue is that the webvpn cookie value could be exposed in debugging output, potentially leaking sensitive information. Root cause: debugging output includes the session cookie. Evidence in connected feeds shows Fedora advisories shifting to fix this by elidi...

CVE-2010-3901

OpenConnect before 2.25 is affected by CVE-2010-3901 due to improper validation of X.509 certificates, enabling MITM attacks where an attacker can spoof AnyConnect SSL VPN servers with a certificate that either does not match the server hostname or is presented when --cafile is not configured. Im...

CVE-2010-3903

CVE-2010-3903 affects OpenConnect (before 2.23). The vulnerability allows remote denial of service (application crash) of an AnyConnect SSL VPN server by triggering a 404 HTTP response. The exact root cause, vulnerable component/file, and remediation are not detailed in the provided documents; ex...

CVE-2009-5009

Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service application crash or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation...

CVE-2010-3901

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

CVE-2010-3902

OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list...

CVE-2010-3902

OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list...

CVE-2009-5009

Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service application crash or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation...

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...

Fedora 14 : openconnect-2.25-1.fc14 (2010-13034)

This update enables validation of the VPN server's SSL certificate by default, to defend against a potential man-in-the-middle attack. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora Update for openconnect FEDORA-2010-12257

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-12257 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for openconnect FEDORA-2010-12253

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-12253 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for openconnect FEDORA-2010-12253

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for openconnect FEDORA-2010-12257

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : openconnect-2.25-1.fc12 (2010-12253)

This update enables validation of the VPN server's SSL certificate by default, to defend against a potential man-in-the-middle attack. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora 13 : openconnect-2.25-1.fc13 (2010-12257)

This update enables validation of the VPN server's SSL certificate by default, to defend against a potential man-in-the-middle attack. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

[SECURITY] Fedora 13 Update: openconnect-2.25-1.fc13

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

[SECURITY] Fedora 12 Update: openconnect-2.25-1.fc12

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

Fedora 10 : NetworkManager-openconnect-0.7.0.99-1.fc10 / knetworkmanager-0.7-0.8.20080926svn.fc10 / etc (2009-2419)

The remote Fedora host is missing one or more security updates : NetworkManager-0.7.0.99-1.fc10 : - Wed Mar 4 2009 Dan Williams - 1:0.7.0.99-1 - nm: make default wired 'Auto ethX' connection modifiable if an enabled system settings plugin supports modifying connections rh 485555 - nm: manpage fix...

[SECURITY] Fedora 10 Update: NetworkManager-openconnect-0.7.0.99-1.fc10

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...