This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name.
(CVE-2009-2408)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers (CVE-2009-2408).

Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts of CPU and memory (CVE-2009-2473).

The Mozilla NSS security framework was updated to version 3.12.3.1.

  - Heap-based buffer overflow in a regular-expression     parser in Mozilla Network Security Services (NSS) before     3.12.3, as used in Firefox, Thunderbird, SeaMonkey,     Evolution, Pidgin, and AOL Instant Messenger (AIM),     allows remote SSL servers to cause a denial of service     (application crash) or possibly execute arbitrary code     via a long domain name in the subject's Common Name (CN)     field of an X.509 certificate, related to the     cert_TestHostName function. (CVE-2009-2404 / MFSA     2009-43)

  - IOActive security researcher Dan Kaminsky reported a     mismatch in the treatment of domain names in SSL     certificates between SSL clients and the Certificate     Authorities (CA) which issue server certificates. In     particular, if a malicious person requested a     certificate for a host name with an invalid null     character in it most CAs would issue the certificate if     the requester owned the domain specified after the null,     while most SSL clients (browsers) ignored that part of     the name and used the unvalidated part in front of the     null. This made it possible for attackers to obtain     certificates that would function for any site they     wished to target. These certificates could be used to     intercept and potentially alter encrypted communication     between the client and a server such as sensitive bank     account transactions. This vulnerability was     independently reported to us by researcher Moxie     Marlinspike who also noted that since Firefox relies on     SSL to protect the integrity of security updates this     attack could be used to serve malicious updates. (MFSA     2009-42 / CVE-2009-2408)

Mozilla Thunderbird was updated to version 2.0.0.23.

The release fixes one security issue: MFSA 2009-42 / CVE-2009-2408:
IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities (CA) which issue server certificates. In particular, if a malicious person requested a certificate for a host name with an invalid null character in it most CAs would issue the certificate if the requester owned the domain specified after the null, while most SSL clients (browsers) ignored that part of the name and used the unvalidated part in front of the null. This made it possible for attackers to obtain certificates that would function for any site they wished to target. These certificates could be used to intercept and potentially alter encrypted communication between the client and a server such as sensitive bank account transactions. This vulnerability was independently reported to us by researcher Moxie Marlinspike who also noted that since Firefox relies on SSL to protect the integrity of security updates this attack could be used to serve malicious updates.

This update of mutt improves the handling of the \0 character in SSL certificates. (CVE-2009-2408 )

Several vulnerabilities have been discovered in the Network Security Service libraries. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-2404     Moxie Marlinspike discovered that a buffer overflow in     the regular expression parser could lead to the     execution of arbitrary code.

  - CVE-2009-2408     Dan Kaminsky discovered that NULL characters in     certificate names could lead to man-in-the-middle     attacks by tricking the user into accepting a rogue     certificate.

  - CVE-2009-2409     Certificates with MD2 hash signatures are no longer     accepted since they're no longer considered     cryptograhically secure.

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2009-3072, CVE-2009-3075)

A use-after-free flaw was found in SeaMonkey. An attacker could use this flaw to crash SeaMonkey or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2009-3077)

Descriptions in the dialogs when adding and removing PKCS #11 modules were not informative. An attacker able to trick a user into installing a malicious PKCS #11 module could use this flaw to install their own Certificate Authority certificates on a user's machine, making it possible to trick the user into believing they are viewing a trusted site or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2009-3076)

A flaw was found in the way SeaMonkey displays the address bar when window.open() is called in a certain way. An attacker could use this flaw to conceal a malicious URL, possibly tricking a user into believing they are viewing a trusted site. (CVE-2009-2654)

All SeaMonkey users should upgrade to these updated packages, which correct these issues. After installing the update, SeaMonkey must be restarted for the changes to take effect.

Versions of Mozilla Thunderbird prior to 2.0.0.23 are affected by an SSL spoofing attack. The client can be fooled into trusting a malicious SSL server certificate with a null character in the host name. (MFSA 2009-42)

The remote host is running a version of SeaMonkey earlier than 1.1.18.  Such versions are potentially affected by multiple vulnerabilities : 

  - A heap overflow vulnerability in the code that handles regular expressions in certificate names. (MFSA-2009-43)

  - A mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities which issue server certificates. (MFSA-2009-42)

The installed version of Firefox is earlier than 3.0.13/3.5.0. Such versions are reportedly potentially affected by the following security issues : 

 - The browser can be fooled into trusting a malicious SSL server certificate with a null character in the host name. (MFSA 2009-42)
 - A heap overflow in the code that handles regular expressions in certificate names can lead to arbitrary code execution. (MFSA 2009-43)

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.2.  Mac OS X 10.6.2 contains security fixes for the following products : 

  - Adaptive Firewall

  - Apache

  - Apache Protable Runtime

  - Certificate Assistant

  - CoreMedia

  - CUPS

  - DoveCot

  - fetchmail

  - file

  - FTP Server

  - Help Viewer

  - ImageIO

  - IOKit

  - IPSec

  - Kernel

  - Launch Services

  - libsecurity

  - libxml

 Login Window

  - OpenLDAP

  - QuickDraw Manager

QuickTime

  - Screen Sharing

  - Subversion

The remote host is running a version of Mozilla SeaMonkey earlier than 1.1.18.  Such versions are potentially affected by multiple vulnerabilities : 

  - A heap overflow vulnerability in the code that handles regular expressions in certificate names. (MFSA-2009-43)

  - A mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities which issue server certificates. (MFSA-2009-42)

The installed version of Mozilla Thunderbird is earlier than 2.0.0.23.  Such versions are potentially affected by the following security issue : 

  - The client can be fooled into trusting a malicious SSL server certificate with a null character in the host name. (MFSA 2009-42)

The installed version of Firefox is earlier than 3.0.13/3.5.0. Such versions are reportedly potentially affected by the following security issues : 

  - The browser can be fooled into trusting a malicious SSL server certificate with a null character in the host name. (MFSA 2009-42)

  - A heap overflow in the code that handles regular expressions in certificate names can lead to arbitrary code execution. (MFSA 2009-43)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
41041	openSUSE Security Update : libldap-2_4-2 (libldap-2_4-2-1301)	Nessus	SuSE Local Security Checks	2009/9/22	2021/1/14	medium
42324	openSUSE 10 Security Update : libneon-devel (libneon-devel-6550)	Nessus	SuSE Local Security Checks	2009/10/30	2021/1/14	medium
41419	SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1199)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high
41986	openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-6493)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	medium
42014	openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	medium
42023	openSUSE 10 Security Update : mutt (mutt-6487)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	medium
44739	Debian DSA-1874-1 : nss - several vulnerabilities	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	high
40933	CentOS 4 : seamonkey (CESA-2009:1431)	Nessus	CentOS Local Security Checks	2009/9/11	2021/1/4	critical
5353	Mozilla Thunderbird < 2.0.0.23 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2010/3/4	2019/3/6	medium
5152	SeaMonkey < 1.1.18 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2009/9/3	2019/3/6	medium
5113	Mozilla Firefox < 3.0.13/3.5.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2009/8/3	2019/3/6	medium
5227	Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2009/11/10	2019/3/6	critical
801235	Mozilla SeaMonkey < 1.1.18 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2009/9/3		high
801349	Mozilla Thunderbird < 2.0.0.23 Certificate Authority (CA) Common Null Byte Handling SSL MiTM Weakness	Log Correlation Engine	SMTP Clients	2010/3/4		medium
800771	Firefox < 3.0.13/3.5.0 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2009/8/3		high
800795	Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	2009/11/10		high

检测

插件搜索

medium

medium

high

medium

medium

medium

high

critical

medium

medium

medium

critical

high

medium

high

high