34 matches found
Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20141016) (POODLE)
This update adds support for the TLS Fallback Signaling Cipher Suite Value TLSFALLBACKSCSV, which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol...
Important: Red Hat Security Advisory: openssl097a and openssl098e security update
Updated openssl097a and openssl098e packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...
Scientific Linux Security Update : openssl on SL6.x i386/x86_64
A ciphersuite downgrade flaw was found in the OpenSSL SSL/TLS server code. A remote attacker could possibly use this flaw to change the ciphersuite associated with a cached session stored on the server, if the server enabled the SSLOPNETSCAPEREUSECIPHERCHANGEBUG option, possibly forcing the clien...
CentOS 6 : libtasn1 (CESA-2012:0427)
Updated libtasn1 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Juniper Junos Fragmented ICMP Packet Handling Remote DoS (PSN-2011-07-298)
According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Receiving a burst of fragmented ICMP packets can cause the router to become unresponsive until it is rebooted. A remote, unauthenticated attacker could...
RedHat Update for dbus RHSA-2011:1132-01
Check for the Version of dbus OpenVAS Vulnerability Test RedHat Update for dbus RHSA-2011:1132-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Nokia N97 - '.m3u' Playlist Crash (PoC)
!/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on : Nokia N97 v 22.0.110 Type RM-505...
RedHat Update for gnutls RHSA-2010:0166-01
Check for the Version of gnutls OpenVAS Vulnerability Test RedHat Update for gnutls RHSA-2010:0166-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Moderate: Red Hat Security Advisory: openssl097a security update
Updated openssl097a packages that fix a security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...
Moderate: Red Hat Security Advisory: libvirt security update
Updated libvirt packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 5th May 2011 After installing this update and restarting the libvirtd service, the...
RedHat Security Advisory RHSA-2009:0008
The remote host is missing updates announced in advisory RHSA-2009:0008. D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility. A denial-of-service flaw was discovered in the system for...
RedHat Security Advisory RHSA-2009:0004
The remote host is missing updates announced in advisory RHSA-2009:0004. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength, general purpose, cryptography library. The Google security team discovered a flaw ...
USN-527-1: xen-3.0 vulnerability
Joris van Rantwijk discovered that the Xen host did not correctly validate the contents of a Xen guests's grug.conf file. Xen guest root users could exploit this to run arbitrary commands on the host when the guest system was rebooted...