538 matches found
CVE-2016-3094
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...
Apache Qpid Java Broker Authentication Bypass Vulnerability
Apache Qpid Java Broker is the United States Apache Apache Software Foundation developed a use of the Java language written for routing and forwarding mail message middleware. An authentication bypass vulnerability exists in Apache Qpid Java Broke. A remote attacker could exploit the vulnerabilit...
Apache Qpid Java Broker Denial of Service Vulnerability
Apache Qpid Java Broker is the United States Apache Apache Software Foundation developed a use of the Java language written for routing and forwarding mail message middleware. A security vulnerability exists in Apache Qpid Java Broker. When the PLAIN mechanism is enabled in the program, an attack...
Fedora 23 : qpid-proton-0.12.1-1.fc23 (2016-e6e8436b98)
Rebased to 0.12.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Netwo...
[SECURITY] Fedora 23 Update: qpid-proton-0.12.1-1.fc23
Proton is a high performance, lightweight messaging library. It can be used in the widest range of messaging applications including brokers, client librar ies, routers, bridges, proxies, and more. Proton is based on the AMQP 1.0 messag ing standard. Using Proton it is trivial to integrate with th...
CVE-2016-2166
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
CVE-2016-2166
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
CVE-2016-2166
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
Code injection
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
CVE-2016-2166
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
CVE-2016-2166
Apache Qpid Proton prior to 0.12.1 is affected. The vulnerable components are proton.reactor.Connector, proton.reactor.Container, and proton.utils.BlockingConnection, which improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable. This could allow a man-in-...
CVE-2016-2166
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
PT-2016-5042 · Apache +1 · Apache Qpid Proton +1
Name of the Vulnerable Software and Affected Versions: Apache Qpid Proton versions prior to 0.12.1 Description: The issue is related to the improper use of an unencrypted connection for an amqps URI scheme when SSL support is unavailable in certain classes. This might allow attackers to obtain...
Fedora 23 : qpid-cpp-0.34-6.fc23 (2016-120b194a75)
Rebuilt against qpid-proton 0.12.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora Update for qpid-cpp FEDORA-2016-120
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 23 Update: qpid-cpp-0.34-6.fc23
Run-time libraries for AMQP client applications developed using Qpid C++. Clients exchange messages with an AMQP message broker using the AMQP protocol...
Oracle: Security Advisory (ELSA-2012-1269)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : MRG (RHSA-2015:0660)
Updated qpid-cpp packages that fix multiple security issues and one bug are now available for Red Hat Enterprise MRG Messaging 2.5 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base score...
Fedora 21 : qpid-cpp-0.32-4.fc21 (2015-9503)
Removed qpid-send and qpid-receive from qpid-cpp-client-devel. Include the qpid.tests module in python-qpid Bumped the release to force a build against Proton 0.9 in F22. Added qpidtoollibs to the qpid-tools package. Fixed path to qpid-ha in the systemd service descriptor. Resolves: BZ1186308 App...