13 matches found
EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
Design/Logic Flaw
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2016-5414
CVE-2016-5414 affects FreeIPA 4.4.0. The vulnerability lets a remote attacker request an arbitrary SAN name for services due to improper SAN handling/validation. The description only states the exposure without detailing exploitation steps, impact scope, or fixes. No remediation is provided in th...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2016-5414: Improper Access Control
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
PT-2017-8722
Name of the Vulnerable Software and Affected Versions FreeIPA version 4.4.0 Description The issue allows remote attackers to request an arbitrary SAN name for services. Recommendations For FreeIPA version 4.4.0, at the moment, there is no information about a newer version that contains a fix for...
CVE-2016-5414
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...
CVE-2013-4545
cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification CURLOPTSSLVERIFYHOST when the digital signature verification CURLOPTSSLVERIFYPEER is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrar...