apache2 vulnerabilities

No description provided by source. =========================================================== Ubuntu Security Notice USN-860-1 November 19, 2009 apache2 vulnerabilities CVE-2009-3094, CVE-2009-3095, CVE-2009-3555 =========================================================== A security issue affect...

SSL Flaw Opens Up Twitter MiTM Attack

The vulnerability in the design of the SSL/TLS protocol revealed earlier this month can apparently be used to carry out attacks in practice. On his blog, student Anil Kurmus reports that he was able to steal a Twitter password by using a man-in-the-middle attack. Until now it had been assumed tha...

ngIRCd SSL/TLS Support MOTD Request Multiple Denial Of Service Vulnerabilities

ngIRCd is prone to multiple denial of service DoS vulnerabilities when the server is running with SSL/TLS support. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ngIRCd SSL/TLS支持MOTD请求远程拒绝服务漏洞

BUGTRAQ ID: 37021 ngIRCd是一款多平台上可使用的IRC守护程序。 对于编译了SSL/TLS支持的ngIRCd服务器，远程攻击者可以通过向src/ngircd/conn.c文件中的ConnGetCipherInfo和ConnUsesSSL函数发送恶意的MOTD请求导致拒绝服务。仅有没有编译ssl/tls支持的服务器才不受影响，在配置中禁用SSL无法缓解这个漏洞。 ngIRCD 14 ngIRCD 13 厂商补丁： ngIRCD ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

ngIRCd SSL/TLS Support MOTD Request Multiple Denial Of Service Vulnerabilities

ngIRCd is prone to multiple denial-of-service vulnerabilities when the server is running with SSL/TLS support. Attackers can leverage these issues to crash the server and deny access to legitimate users. ngIRCd 13 through ngIRCd 14 are vulnerable; these issues have been fixed in ngIRCd 14.1...

CVE-2009-3936

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

Authentication flaw

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

CVE-2009-3936

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

Mandrake Security Advisory MDVSA-2009:271 (libnasl)

The remote host is missing an update to libnasl announced via advisory MDVSA-2009:271. OpenVAS Vulnerability Test $Id: mdksa2009271.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:271 libnasl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:271 (libnasl)

The remote host is missing an update to libnasl announced via advisory MDVSA-2009:271. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Debian Security Advisory DSA 1904-1 (wget)

The remote host is missing an update to wget announced via advisory DSA 1904-1. OpenVAS Vulnerability Test $Id: deb19041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1904-1 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Pidgin Multiple Vulnerabilities (Sep 2009) - Linux

Pidgin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin Multiple Vulnerabilities (Sep 2009) - Windows

Pidgin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

*.com accepted as wildcard match in SSL/TLS name matching

Certificate authorities are expected to vet all certificate registrations, but may fail to prevent fraudulent or erroneous registrations. Certificates which use a wild card immediately before the top level domain, or nulls in the domain name, may pass validation checks in Opera. Sites using such...

RHEL 3 / 4 / 5 : java-1.4.2-ibm (RHSA-2008:0132)

Updated java-1.4.2-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.4.2 SR10 Java release includes the IBM...

RHEL 4 / 5 : java-1.5.0-bea (RHSA-2007:0956)

Updated java-1.5.0-bea packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The BEA WebLogic JRockit 1.5.011 JRE and SDK conta...

Debian: Security Advisory (DSA-1852-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1852-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 1852-1. OpenVAS Vulnerability Test $Id: deb18521.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1852-1 fetchmail Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2009-01: Improper SSL certificate subject verification Topics: Improper SSL certificate subject verification Author: Matthias Andree Version: 1.0 Announced: 2009-08-06 Type: Allows undetected Man-in-the-middle attacks against SSL/TLS...

[SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA-1852-1 [email protected] http://www.debian.org/security/ Nico Golde August 7th, 2009 http://www.debian.org/security/faq -...