Perl IO::Socket::SSL 'verify_hostname_of_cert()' Security Bypass Vulnerability

The IO::Socket::SSL module for Perl is prone to a security- bypass vulnerability because the application fails to properly validate certificate hostnames. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Perl IO::Socket::SSL 'verify_hostname_of_cert()' Security Bypass Vulnerability

The IO::Socket::SSL module for Perl is prone to a security- bypass vulnerability because the application fails to properly validate certificate hostnames. Successfully exploiting this issue allows attackers to bypass certain security restrictions, which may aid in further attacks. Versions prior ...

Mandriva Security Advisory MDVSA-2009:252-1 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory MDVSA-2009:252-1. OpenVAS Vulnerability Test $Id: mdksa20092521.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:252-1 perl-IO-Socket-SSL Authors: Thomas Reinke Copyrigh...

Mandriva Security Advisory MDVSA-2009:252-1 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory MDVSA-2009:252-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SLES11: Security update for perl-IO-Socket-SSL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl-IO-Socket-SSL More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES11: Security update for perl-IO-Socket-SSL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl-IO-Socket-SSL More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

[ MDVSA-2009:178 ] perl-IO-Socket-SSL

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:178 http://www.mandriva.com/security/ Package : perl-IO-Socket-SSL Date : September 30, 2009 Affected: 2009.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in...

perl IO::Socket::SSL certificate validation vulnerability

IO-Socket-SSL host name is not correctly validated...

Mandriva Linux Security Advisory : perl-IO-Socket-SSL (MDVSA-2009:252-1)

A vulnerability was discovered and corrected in perl-IO-Socket-SSL : The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the...

MDVSA-2009:178 : perl-IO-Socket-SSL

A vulnerability was discovered and corrected in perl-IO-Socket-SSL: The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the...

SuSE 11 Security Update : perl-IO-Socket-SSL (SAT Patch Number 1265)

This update of perl-IO-Socket-SSL improves the hostname checking of the SSL certificate. CVE-2009-3024 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

Phishing Tool

Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...

Phishing Tool

Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...

Phishing Tool

Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...

Phishing Tool

Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...

openSUSE Security Update : perl-IO-Socket-SSL (perl-IO-Socket-SSL-1264)

This update of perl-IO-Socket-SSL improves the hostname checking of the SSL certificate. CVE-2009-3024 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-IO-Socket-SSL-1264. The text...

Oracle Secure Backup property_box.php type parameter command execution

Added: 09/01/2009 CVE: CVE-2009-1978 BID: 35678 OSVDB: 55904 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command execution vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...

DEBIAN-CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...