CVE-2012-2203

CVE-2012-2203 concerns IBM GSKit (PKCS#12) where trust anchors can be inserted into the keystore, enabling possible SSL/TLS spoofing. IBM advisories show GSKit updates as remediation across multiple products: for Tivoli/GSKit 7.x use 7.0.4.41 or later; for GSKit 8.x use 8.0.14.22 or later (e.g., ...

CVE-2012-3372

The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...

Code injection

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority...

CVE-2010-5076

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority...

Opera 'X.509' Certificates Spoofing Vulnerability (Linux)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnlin.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone Network...

Opera 'X.509' Certificates Spoofing Vulnerability (Mac OS X)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone...

Opera 'X.509' Certificates Spoofing Vulnerability - Linux

Opera is prone to a spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802436...

Opera 'X.509' Certificates Spoofing Vulnerability - Mac OS X

Opera is prone to spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802437";...

CVE-2012-0732

The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2010:0951-1)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2011-1094

kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate...

Fedora 13 : openssl-1.0.0b-1.fc13 (2010-17847)

This is a minor update from upstream fixing one race condition theoretically exploitable from remote connections in some SSL servers CVE-2010-3864. There are also a few additional bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 12 : openssl-1.0.0b-1.fc12 (2010-17826)

This is a minor update from upstream fixing one race condition theoretically exploitable from remote connections in some SSL servers CVE-2010-3864. There are also a few additional bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

BSA-009 Security Update for nss

Alexander Reichle-Schmehl uploaded new packages for nss which fixed the following security problems: CVE-2010-3170 NSS recognizes a wildcard IP address in the subjects Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a...

DSA-2123-1 nss - cryptographic weaknesses

Bulletin has no description...

CVE-2010-3170

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

Design/Logic Flaw

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

Mandriva Update for libesmtp MDVSA-2010:195 (libesmtp)

Check for the Version of libesmtp OpenVAS Vulnerability Test Mandriva Update for libesmtp MDVSA-2010:195 libesmtp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libesmtp MDVSA-2010:195 (libesmtp)

Check for the Version of libesmtp OpenVAS Vulnerability Test Mandriva Update for libesmtp MDVSA-2010:195 libesmtp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[ MDVSA-2010:195 ] libesmtp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:195 http://www.mandriva.com/security/ Package : libesmtp Date : October 4, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple...