Debian DSA-888-1 : openssl - cryptographic weakness

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...

Debian DSA-875-1 : openssl094 - cryptographic weakness

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...

Debian DSA-1182-1 : gnutls11 - cryptographic weakness

Daniel Bleichenbacher discovered a flaw in GNU TLS cryptographic package that could allow an attacker to generate a forged signature that GNU TLS will accept as valid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2006-5238: Undefined Security Weakness

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

CVE-2006-5160: Undefined Security Weakness

Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that "I have no undisclosed Firefox...

CVE-2006-5049: Undefined Security Weakness

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5046: Undefined Security Weakness

Unspecified vulnerability in RS Gallery2 comrsgallery2 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of "hardened language files."...

CVE-2006-5041: Undefined Security Weakness

Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5024: Undefined Security Weakness

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner sHTTPScanner before 0.4 have unknown impact and attack vectors...

CVE-2006-5026: Undefined Security Weakness

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner sHTTPScanner before 0.3 have unknown impact and attack vectors...

CVE-2006-4996: Undefined Security Weakness

Unspecified vulnerability in JoomlaLib comjoomlalib before 1.2.2 for Joomla! allows remote attackers to have an unknown impact, related to "Joomla globals hacked by script kiddies."...

[SECURITY] [DSA 1182-1] New gnutls11 packages fix RSA signature forgery cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 1182-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 22nd, 2006 http://www.debian.org/security/faq -...

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution source: https://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script...

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution

source: https://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of the affected application and load...

[SECURITY] [DSA 1174-1] New openssl096 packages fix RSA signature forgery cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 1174-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 11th, 2006 http://www.debian.org/security/faq -...

DSA-1174-1 openssl096 - cryptographic weakness

Bulletin has no description...

DSA-1173-1 openssl - cryptographic weakness

Bulletin has no description...

Joomla! < 1.0.11 administrator/index.php Input Weakness

The version of Joomla! installed on the remote host is affected by an input weakness flaw in the administrator/index.php script due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to impact confidentiality, integrity, or availability. No other...

CVE-2006-4473: Undefined Security Weakness

Unspecified vulnerability in comcontent in Joomla! before 1.0.11, when $mosConfighideEmail is set, allows attackers to perform the emailform and emailsend tasks...

CVE-2006-4461: Undefined Security Weakness

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and attack vectors...