368 matches found
UBUNTU-CVE-2014-7202
streamengine.cpp in libzmq aka ZeroMQ/C++ 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request...
Design/Logic Flaw
libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...
CVE-2014-7202
CVE-2014-7202 affects libzmq (ZeroMQ/C++) 4.0.5 prior to 4.0.5, where stream_engine.cpp enables man‑in‑the‑middle downgrade attacks via a crafted connection request. Root cause is in the stream_engine handling; impact is MITM downgrade vulnerability. Remediation: upgrade to version 4.0.5 (or late...
CVE-2014-7203
libzmq (ZeroMQ/C++) 4.0.x before 4.0.5 exposes a replay vulnerability (CVE-2014-7203) because nonces are not guaranteed unique, enabling man-in-the-middle replay attacks via unspecified vectors. The issue is fixed in libzmq 4.0.5 (e.g., openSUSE/SUSE updates reference CVE-2014-7203 and CVE-2014-7...
Fedora Update for fedmsg FEDORA-2013-17904
Check for the Version of fedmsg OpenVAS Vulnerability Test Fedora Update for fedmsg FEDORA-2013-17904 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] Fedora 18 Update: fedmsg-0.7.1-2.fc18
Python API used around Fedora Infrastructure to send and receive messages w ith zeromq. Includes some CLI tools...