Sendmail < 8.14.4 SSL Certificate NULL Character Spoofing

Binary data 5293.prm...

Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Sendmail is prone to a security-bypass vulnerability because the application fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones. Successfully exploiting this issue allows attackers to perform...

PostgreSQL multiple security vulnerabilities

SSL certificate spoofing, privilege escalation...

Fedora Core 10 FEDORA-2009-11739 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11739. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-11740 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11740. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 12 FEDORA-2009-11836 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11836. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 10 : wget-1.12-2.fc10 (2009-11739)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Fedora 12 : wget-1.12-2.fc12 (2009-11836)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : wget-1.12-2.fc11 (2009-11740)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

SSL Certificate Expiry - Future Validity

The SSL certificate for the remote SSL-enabled service is not yet valid. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42980; scriptversion "$Revision: 1.8 $"; scriptcvsdate"$Date: 2012/04/02 16:34:10 $"; scriptnameenglish:"SSL Certificate Expiry - Future Validity";...

SSL Certificate Expiry - Future Expiry

The SSL certificate associated with the remote service will expire soon. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42981; scriptversion "1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/04"; scriptnameenglish:"SSL Certificate Expiry -...

SuSE9 Security Update : mutt (YOU Patch Number 12553)

This update improves the handling of SSL certificates and fixes a minor usability bug introduced with the last security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

MDVA-2009:226 : apache

This is a minor bugfix release for apache modssl: The openssl and makedev packages is needed at install time from cdrom medias in %post for the apache-modssl sub package in order to be able to generate the dummy ssl certificate fixes 55951 The packages provided with this update addresses this...

ssl-cert NSE Script

Retrieves a server's SSL certificate. The amount of information printed about the certificate depends on the verbosity level. With no extra verbosity, the script prints the validity period and the commonName, organizationName, stateOrProvinceName, and countryName of the subject. 443/tcp open http...

Mozilla Firefox onunload SSL Certificate Spoofing (CVE-2004-0763)

Mozilla is a popular open-source Internet communication suite produced by the Mozilla Foundation. The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. There exists a vulnerability in the w...

Mozilla NSS NULL Character CA SSL Certificate Bypass

Private-Key: 1024 bit modulus: 00:cf:4d:17:42:00:8d:0c:41:95:31:8c:40:30:bc: 5e:42:b6:28:09:75:2f:19:61:d9:ab:4d:ec:f3:44: c4:1c:01:95:6f:27:eb:70:07:98:4f:1e:05:d0:f3: 6c:49:45:e6:de:48:7a:59:f0:c2:93:6a:37:9c:02: 72:4f:bd:14:36:26:a1:70:97:d4:fe:4b:24:e8:cd:...

USN-858-1: OpenLDAP vulnerability

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

deprecate MD2 in SSL cert validation (Kaminsky)

The Network Security Services NSS library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash...

Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass

source: https://www.securityfocus.com/bid/35888/info Mozilla Network Security Services NSS is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones. Th...

Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass

Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass source: https://www.securityfocus.com/bid/35888/info Mozilla Network Security Services NSS is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate,...