oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:9782

Oval ID:	oval:org.mitre.oval:def:9782
Title:	The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.
Description:	The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-1558	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.1.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3 AND seamonkey is earlier than 0:1.0.9-0.1.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3 AND evolution is earlier than 0:1.4.5-20.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.1.el3 AND fetchmail is earlier than 0:6.2.0-3.el3.4 AND mutt is earlier than 5:1.4.1-5.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.1.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.1.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.1.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3 AND evolution-devel is earlier than 0:1.4.5-20.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-js-debugger is earlier than 0:1.0.9-2.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-2.el4 AND irb is earlier than 0:1.8.1-7.el4_8.3 AND seamonkey-nss is earlier than 0:1.0.9-2.el4 AND devhelp-devel is earlier than 0:0.10-0.8.el4 AND ruby-docs is earlier than 0:1.8.1-7.el4_8.3 AND ruby-mode is earlier than 0:1.8.1-7.el4_8.3 AND seamonkey-nspr is earlier than 0:1.0.9-2.el4 AND ruby-devel is earlier than 0:1.8.1-7.el4_8.3 AND thunderbird is earlier than 0:1.5.0.12-0.1.el4 AND ruby is earlier than 0:1.8.1-7.el4_8.3 AND ruby-libs is earlier than 0:1.8.1-7.el4_8.3 AND seamonkey is earlier than 0:1.0.9-2.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4 AND devhelp is earlier than 0:0.10-0.8.el4 AND evolution is earlier than 0:2.0.2-35.0.2.el4 AND seamonkey-mail is earlier than 0:1.0.9-2.el4 AND mutt is earlier than 5:1.4.1-12.0.3.el4 AND fetchmail is earlier than 0:6.2.5-6.0.1.el4 AND ruby-tcltk is earlier than 0:1.8.1-7.el4_8.3 AND seamonkey-chat is earlier than 0:1.0.9-2.el4 AND seamonkey-devel is earlier than 0:1.0.9-2.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4 AND evolution-devel is earlier than 0:2.0.2-35.0.2.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section ruby-ri is earlier than 0:1.8.5-5.el5_3.7 AND ruby-mode is earlier than 0:1.8.5-5.el5_3.7 AND ruby-docs is earlier than 0:1.8.5-5.el5_3.7 AND ruby-devel is earlier than 0:1.8.5-5.el5_3.7 AND thunderbird is earlier than 0:1.5.0.12-1.el5 AND ruby is earlier than 0:1.8.5-5.el5_3.7 AND ruby-libs is earlier than 0:1.8.5-5.el5_3.7 AND evolution-data-server-devel is earlier than 0:1.8.0-15.0.3.el5 AND evolution-data-server is earlier than 0:1.8.0-15.0.3.el5 AND fetchmail is earlier than 0:6.3.6-1.0.1.el5 AND mutt is earlier than 5:1.4.2.2-3.0.2.el5 AND ruby-tcltk is earlier than 0:1.8.5-5.el5_3.7 AND ruby-rdoc is earlier than 0:1.8.5-5.el5_3.7 AND ruby-irb is earlier than 0:1.8.5-5.el5_3.7

Definition Id: oval:org.mitre.oval:def:11831

Oval ID:	oval:org.mitre.oval:def:11831
Title:	The operating system installed on the system is Red Hat Enterprise Linux 4
Description:	The operating system installed on the system is Red Hat Enterprise Linux 4.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:4	Version:	7
Platform(s):	Red Hat Enterprise Linux 4	Product(s):
Definition Synopsis:
Red Hat Enterprise 4 is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:16636

Oval ID:	oval:org.mitre.oval:def:16636
Title:	CentOS Linux 4.x
Description:	The operating system installed on the system is CentOS Linux 4.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:4	Version:	3
Platform(s):	CentOS Linux 4	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 4.x is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:15990

Oval ID:	oval:org.mitre.oval:def:15990
Title:	Oracle Linux 4.x
Description:	The operating system installed on the system is Oracle Linux 4.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:4	Version:	5
Platform(s):	Oracle Linux 4	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 4.x is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:11782

Oval ID:	oval:org.mitre.oval:def:11782
Title:	The operating system installed on the system is Red Hat Enterprise Linux 3
Description:	The operating system installed on the system is Red Hat Enterprise Linux 3.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:3	Version:	7
Platform(s):	Red Hat Enterprise Linux 3	Product(s):
Definition Synopsis:
Red Hat Enterprise 3 is installed
Referenced By:
oval:org.mitre.oval:def:9782

Definition Id: oval:org.mitre.oval:def:16651

Oval ID:	oval:org.mitre.oval:def:16651
Title:	CentOS Linux 3.x
Description:	The operating system installed on the system is CentOS Linux 3.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:3	Version:	3
Platform(s):	CentOS Linux 3	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 3.x is installed
Referenced By:
oval:org.mitre.oval:def:9782

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0562s

Facebook rss twitter linkedin mail