10 - VMSA-2010-0015

Executive Summary

Summary
Title	VMware ESX third party updates for Service Console

Informations
Name	VMSA-2010-0015	First vendor Publication	2010-09-30
Vendor	VMware	Last vendor Modification	2010-09-30
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

a. Service Console update for NSS_db

The service console package NSS_db is updated to version nss_db-2.2-35.4.el5_5.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-0826 to this issue.

b. Service Console update for OpenLDAP

The service console package OpenLDAP updated to version 2.3.43-12.el5.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2009-3767 to this issue.

c. Service Console update for cURL

The service console packages for cURL updated to version 7.15.5-9.el5.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-0734 to this issue.

d. Service Console update for sudo

The service console package sudo updated to version 1.7.2p1-7.el5_5.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-1646 to this issue.

e. Service Console update for OpenSSL, GnuTLS, NSS and NSPR

Service Console updates for OpenSSL to version 097a-0.9.7a-9.el5_4.2 and version 0.9.8e-12.el5_4.6, GnuTLS to version 1.4.1-3.el5_4.8, and NSS to version 3.12.6-1.3235.vmw and NSPR to version 4.8.4-1.3235.vmw. These four updates are bundled together due to their mutual dependencies.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-3555, CVE-2009-2409, CVE-2009-3245 and CVE-2010-0433 to the issues addressed in this update.

Original Source

Url : http://www.vmware.com/security/advisories/VMSA-2010-0015.html

CWE : Common Weakness Enumeration

%	Id	Name
38 %	CWE-295	Certificate Issues
25 %	CWE-264	Permissions, Privileges, and Access Controls
25 %	CWE-20	Improper Input Validation
12 %	CWE-200	Information Exposure

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10088

Oval ID:	oval:org.mitre.oval:def:10088
Title:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-33.26 AND openssl-devel is earlier than 0:0.9.7a-33.26 AND openssl is earlier than 0:0.9.7a-33.26 AND httpd-devel is earlier than 0:2.0.46-77.ent AND mod_ssl is earlier than 0:2.0.46-77.ent AND httpd is earlier than 0:2.0.46-77.ent OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5 AND httpd-suexec is earlier than 0:2.0.52-41.ent.6 AND httpd-manual is earlier than 0:2.0.52-41.ent.6 AND nspr is earlier than 0:4.8.4-1.1.el4_8 AND mod_ssl is earlier than 0:2.0.52-41.ent.6 AND nss is earlier than 0:3.12.6-1.el4_8 AND nspr-devel is earlier than 0:4.8.4-1.1.el4_8 AND httpd is earlier than 0:2.0.52-41.ent.6 AND openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5 AND gnutls is earlier than 0:1.0.20-4.el4_8.7 AND openssl is earlier than 0:0.9.7a-43.17.el4_8.5 AND httpd-devel is earlier than 0:2.0.52-41.ent.6 AND nss-devel is earlier than 0:3.12.6-1.el4_8 AND gnutls-devel is earlier than 0:1.0.20-4.el4_8.7 AND nss-tools is earlier than 0:3.12.6-1.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl097a is earlier than 0:0.9.7a-9.el5_4.2 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4 AND httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND nspr-devel is earlier than 0:4.8.4-1.el5_4 AND gnutls is earlier than 0:1.4.1-3.el5_4.8 AND openssl is earlier than 0:0.9.8e-12.el5_4.6 AND httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND httpd is earlier than 0:2.2.3-31.el5_4.2 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:10580

Oval ID:	oval:org.mitre.oval:def:10580
Title:	The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Description:	The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-1646	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND sudo is earlier than 0:1.7.2p1-7.el5_5

Definition Id: oval:org.mitre.oval:def:10727

Oval ID:	oval:org.mitre.oval:def:10727
Title:	The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.
Description:	The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0826	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND nss_db is earlier than 0:2.2-35.4.el5_5

Definition Id: oval:org.mitre.oval:def:10760

Oval ID:	oval:org.mitre.oval:def:10760
Title:	content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
Description:	content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0734	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section curl-devel is earlier than 0:7.10.6-11.rhel3 AND curl is earlier than 0:7.10.6-11.rhel3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section curl-devel is earlier than 0:7.12.1-11.1.el4_8.3 AND curl is earlier than 0:7.12.1-11.1.el4_8.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section curl-devel is earlier than 0:7.15.5-9.el5 AND curl is earlier than 0:7.15.5-9.el5

Definition Id: oval:org.mitre.oval:def:10763

Oval ID:	oval:org.mitre.oval:def:10763
Title:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-33.26 AND seamonkey-nspr is earlier than 0:1.0.9-0.45.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3 AND seamonkey is earlier than 0:1.0.9-0.45.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3 AND openssl-devel is earlier than 0:0.9.7a-33.26 AND openssl is earlier than 0:0.9.7a-33.26 AND seamonkey-mail is earlier than 0:1.0.9-0.45.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.45.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.45.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.45.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5 AND openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5 AND openssl is earlier than 0:0.9.7a-43.17.el4_8.5 AND nss-devel is earlier than 0:3.12.3.99.3-1.el4_8.2 AND nspr is earlier than 0:4.7.4-1.el4_8.1 AND nss is earlier than 0:3.12.3.99.3-1.el4_8.2 AND nss-tools is earlier than 0:3.12.3.99.3-1.el4_8.2 AND nspr-devel is earlier than 0:4.7.4-1.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl-perl is earlier than 0:0.9.8e-12.el5_4.1 AND nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nspr-devel is earlier than 0:4.7.4-1.el5_3.1 AND gnutls is earlier than 0:1.4.1-3.el5_4.8 AND openssl is earlier than 0:0.9.8e-12.el5_4.1 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5 AND nspr is earlier than 0:4.7.4-1.el5_3.1 AND nss is earlier than 0:3.12.3.99.3-1.el5_3.2 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.1 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5 AND nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:11178

Oval ID:	oval:org.mitre.oval:def:11178
Title:	libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Description:	libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3767	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section compat-openldap is earlier than 0:2.3.43-12.el5 AND openldap-servers-overlays is earlier than 0:2.3.43-12.el5 AND openldap-devel is earlier than 0:2.3.43-12.el5 AND openldap-clients is earlier than 0:2.3.43-12.el5 AND openldap is earlier than 0:2.3.43-12.el5 AND openldap-servers-sql is earlier than 0:2.3.43-12.el5 AND openldap-servers is earlier than 0:2.3.43-12.el5

Definition Id: oval:org.mitre.oval:def:11578

Oval ID:	oval:org.mitre.oval:def:11578
Title:	Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Involving Handshake Renegotiation Affects OpenSSL
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	3
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 10 (SPARC) meets Sun Alert 1021653.1 Solaris 10 (SPARC) is installed AND NOT Patch 143140-04 or later installed OR Solaris 10 (SPARC) meets Sun Alert 1021653.1 Solaris 10 (SPARC) is installed AND NOT Patch 145102-01 or later installed OR Solaris 10 (x86) meets Sun Alert 1021653.1 Solaris 10 (x86) is installed AND NOT Patch 141525-10 or later installed

Definition Id: oval:org.mitre.oval:def:11617

Oval ID:	oval:org.mitre.oval:def:11617
Title:	AIX OpenSSL session renegotiation vulnerability
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	3
Platform(s):	IBM AIX 5.2 IBM AIX 5.3 IBM AIX 6.1	Product(s):
Definition Synopsis:
OS check IBM AIX 5.3 is installed AND openssl.base versions less than 0.9.8.1102 OR OS based check IBM AIX 5.3 is installed AND openssl.base FIPS capable versions less than 12.9.8.1102 OR OS check openssl.base versions less than 0.9.8.1102 AND IBM AIX Version 6.1 check AND IBM AIX Version 6.1 check OR openssl.base FIPS capable versions less than 12.9.8.1102 AND IBM AIX Version 6.1 check AND IBM AIX Version 6.1 check OR IBM AIX 5.2 is installed AND openssl.base versions less than 0.9.8.805

Definition Id: oval:org.mitre.oval:def:11738

Oval ID:	oval:org.mitre.oval:def:11738
Title:	HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
Description:	OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3245	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02517 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.002 AND openssl.OPENSSL-INC version is less than A.00.09.08n.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.002 OR Criteria meets HP Security Bulletin HPSBUX02517 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.001 AND openssl.OPENSSL-INC version is less than A.00.09.08n.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.001 OR Criteria meets HP Security Bulletin HPSBUX02517 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.003 AND openssl.OPENSSL-INC version is less than A.00.09.08n.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.003

Definition Id: oval:org.mitre.oval:def:11784

Oval ID:	oval:org.mitre.oval:def:11784
Title:	DSA-2062 sudo -- missing input sanitisation
Description:	Anders Kaseorg and Evan Broder discovered a vulnerability in sudo, a program designed to allow a sysadmin to give limited root privileges to users, that allows a user with sudo permissions on certain programs to use those programs with an untrusted value of PATH. This could possibly lead to certain intended restrictions being bypassed, such as the secure_path setting.
Family:	unix	Class:	patch
Reference(s):	DSA-2062 CVE-2010-1646	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	sudo
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section sudo-ldap is earlier than 1.6.9p17-3 AND sudo is earlier than 1.6.9p17-3

Definition Id: oval:org.mitre.oval:def:12260

Oval ID:	oval:org.mitre.oval:def:12260
Title:	HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0433	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02517 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.002 AND openssl.OPENSSL-INC version is less than A.00.09.08n.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.002 OR Criteria meets HP Security Bulletin HPSBUX02517 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.001 AND openssl.OPENSSL-INC version is less than A.00.09.08n.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.001 OR Criteria meets HP Security Bulletin HPSBUX02517 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.003 AND openssl.OPENSSL-INC version is less than A.00.09.08n.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.003

Definition Id: oval:org.mitre.oval:def:12909

Oval ID:	oval:org.mitre.oval:def:12909
Title:	USN-956-1 -- sudo vulnerability
Description:	Evan Broder and Anders Kaseorg discovered that sudo did not properly sanitize its environment when configured to use secure_path . A local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the attacker to use a program that interpreted the PATH environment variable.
Family:	unix	Class:	patch
Reference(s):	USN-956-1 CVE-2010-1646	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	sudo
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.6.9p10-1ubuntu3.8 AND sudo DPKG is earlier than 1.6.9p10-1ubuntu3.8 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.7.2p1-1ubuntu5.1 AND sudo DPKG is earlier than 1.7.2p1-1ubuntu5.1 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.7.0-1ubuntu2.4 AND sudo DPKG is earlier than 1.7.0-1ubuntu2.4 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.6.8p12-1ubuntu6.3 AND sudo DPKG is earlier than 1.6.8p12-1ubuntu6.3 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.6.9p17-1ubuntu3.3 AND sudo DPKG is earlier than 1.6.9p17-1ubuntu3.3

Definition Id: oval:org.mitre.oval:def:13085

Oval ID:	oval:org.mitre.oval:def:13085
Title:	USN-927-1 -- nss vulnerability
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-1 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):	nss
Definition Synopsis:
Ubuntu 9.10 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.9.10.1

Definition Id: oval:org.mitre.oval:def:13260

Oval ID:	oval:org.mitre.oval:def:13260
Title:	USN-922-1 -- libnss-db vulnerability
Description:	Stephane Chazelas discovered that libnss-db did not correctly set up a database environment. A local attacker could exploit this to read the first line of arbitrary files, leading to a loss of privacy and possibly privilege escalation.
Family:	unix	Class:	patch
Reference(s):	USN-922-1 CVE-2010-0826	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 9.04	Product(s):	libnss-db
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND libnss-db DPKG is earlier than 2.2.3pre1-3ubuntu1.8.04.2 OR Release section Ubuntu 8.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND libnss-db DPKG is earlier than 2.2.3pre1-3ubuntu1.8.10.2 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND libnss-db DPKG is earlier than 2.2.3pre1-3ubuntu3.9.10.2 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND libnss-db DPKG is earlier than 2.2.3pre1-3ubuntu3.9.04.2

Definition Id: oval:org.mitre.oval:def:13409

Oval ID:	oval:org.mitre.oval:def:13409
Title:	USN-830-1 -- openssl vulnerability
Description:	Dan Kaminsky discovered OpenSSL would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation.
Family:	unix	Class:	patch
Reference(s):	USN-830-1 CVE-2009-2409	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 9.04 Ubuntu 6.06 Ubuntu 8.10	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-4ubuntu3.8 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-4ubuntu3.8 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-4ubuntu3.8 AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.8 AND libssl-dev DPKG is earlier than 0.9.8g-4ubuntu3.8 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.8 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-15ubuntu3.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-15ubuntu3.3 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-15ubuntu3.3 AND libssl0.9.8 DPKG is earlier than 0.9.8g-15ubuntu3.3 AND libssl-dev DPKG is earlier than 0.9.8g-15ubuntu3.3 AND openssl DPKG is earlier than 0.9.8g-15ubuntu3.3 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libssl0.9.8 DPKG is earlier than 0.9.8a-7ubuntu0.10 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8a-7ubuntu0.10 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8a-7ubuntu0.10 AND openssl DPKG is earlier than 0.9.8a-7ubuntu0.10 AND libssl-dev DPKG is earlier than 0.9.8a-7ubuntu0.10 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-10.1ubuntu2.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND libssl0.9.8 DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND libssl-dev DPKG is earlier than 0.9.8g-10.1ubuntu2.5 AND openssl DPKG is earlier than 0.9.8g-10.1ubuntu2.5

Definition Id: oval:org.mitre.oval:def:13424

Oval ID:	oval:org.mitre.oval:def:13424
Title:	USN-990-1 -- openssl vulnerability
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it. ATTENTION: After applying this update, a patched server will allow both patched and unpatched clients to connect, but unpatched clients will not be able to renegotiate
Family:	unix	Class:	patch
Reference(s):	USN-990-1 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-4ubuntu3.10 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl-dev DPKG is earlier than 0.9.8g-4ubuntu3.10 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.10 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8k-7ubuntu8.1 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libssl-dev DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8k-7ubuntu8.1 AND openssl DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-16ubuntu3.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl0.9.8 DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl-dev DPKG is earlier than 0.9.8g-16ubuntu3.2 AND openssl DPKG is earlier than 0.9.8g-16ubuntu3.2 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libssl0.9.8 DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8a-7ubuntu0.12 AND openssl DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libssl-dev DPKG is earlier than 0.9.8a-7ubuntu0.12 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-15ubuntu3.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl0.9.8 DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl-dev DPKG is earlier than 0.9.8g-15ubuntu3.5 AND openssl DPKG is earlier than 0.9.8g-15ubuntu3.5

Definition Id: oval:org.mitre.oval:def:13440

Oval ID:	oval:org.mitre.oval:def:13440
Title:	USN-927-4 -- nss vulnerability
Description:	USN-927-1 fixed vulnerabilities in nss in Ubuntu 9.10. This update provides the corresponding updates for Ubuntu 8.04 LTS. Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-4 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	nss
Definition Synopsis:
Ubuntu 8.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:13495

Oval ID:	oval:org.mitre.oval:def:13495
Title:	DSA-2023-1 curl -- buffer overflow
Description:	Wesley Miaw discovered that libcurl, a multi-protocol file transfer library, is prone to a buffer overflow via the callback function when an application relies on libcurl to automatically uncompress data. Note that this only affects applications that trust libcurl’s maximum limit for a fixed buffer size and do not perform any sanity checks themselves. For the stable distribution, this problem has been fixed in version 7.18.2-8lenny4. Due to a problem with the archive software, we are unable to release all architectures simultaneously. Binaries for the hppa, ia64, mips, mipsel and s390 architectures will be provided once they are available. For the testing distribution and the unstable distribution, this problem has been fixed in version 7.20.0-1. We recommend that you upgrade your curl packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2023-1 CVE-2010-0734	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	curl
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is alpha AND Installed architecture is arm Packages section libcurl4-gnutls-dev DPKG is earlier than 7.18.2-8lenny4 AND libcurl4-openssl-dev DPKG is earlier than 7.18.2-8lenny4 AND libcurl3-gnutls DPKG is earlier than 7.18.2-8lenny4 AND libcurl3-dbg DPKG is earlier than 7.18.2-8lenny4 AND libcurl3 DPKG is earlier than 7.18.2-8lenny4 AND curl DPKG is earlier than 7.18.2-8lenny4

Definition Id: oval:org.mitre.oval:def:13529

Oval ID:	oval:org.mitre.oval:def:13529
Title:	USN-990-2 -- apache2 vulnerability
Description:	USN-860-1 introduced a partial workaround to Apache that disabled client initiated TLS renegotiation in order to mitigate CVE-2009-3555. USN-990-1 introduced the new RFC5746 renegotiation extension in openssl, and completely resolves the issue. After updating openssl, an Apache server will allow both patched and unpatched web browsers to connect, but unpatched browsers will not be able to renegotiate. This update introduces the new SSLInsecureRenegotiation directive for Apache that may be used to re-enable insecure renegotiations with unpatched web browsers. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it.
Family:	unix	Class:	patch
Reference(s):	USN-990-2 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	apache2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-doc DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-src DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2 DPKG is earlier than 2.2.8-1ubuntu0.18 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2.2-common DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-threaded-dev DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-prefork-dev DPKG is earlier than 2.2.8-1ubuntu0.18 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.2.14-5ubuntu8.2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section apache2.2-bin DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-utils DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-worker DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2.2-common DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec-custom DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2 DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-prefork DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-threaded-dev DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-event DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-itk DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-prefork-dev DPKG is earlier than 2.2.14-5ubuntu8.2 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-prefork DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-itk DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-worker DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-event DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2.2-common DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2 DPKG is earlier than 2.2.12-1ubuntu2.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2.2-bin DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-utils DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec-custom DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-threaded-dev DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-prefork-dev DPKG is earlier than 2.2.12-1ubuntu2.3 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.0.55-4ubuntu2.11 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libapr0 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-utils DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-worker DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-perchild DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-common DPKG is earlier than 2.0.55-4ubuntu2.11 AND libapr0-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-threaded-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-prefork DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-prefork-dev DPKG is earlier than 2.0.55-4ubuntu2.11 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-src DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2 DPKG is earlier than 2.2.11-2ubuntu2.7 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-worker DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2.2-common DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec-custom DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-prefork DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-threaded-dev DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-event DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-prefork-dev DPKG is earlier than 2.2.11-2ubuntu2.7

Definition Id: oval:org.mitre.oval:def:13532

Oval ID:	oval:org.mitre.oval:def:13532
Title:	USN-927-6 -- nss vulnerability
Description:	USN-927-1 fixed vulnerabilities in NSS on Ubuntu 9.10. This update provides the corresponding updates for Ubuntu 9.04. Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-6 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):	nss
Definition Synopsis:
Ubuntu 9.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13622

Oval ID:	oval:org.mitre.oval:def:13622
Title:	DSA-2062-1 sudo -- missing input sanitisation
Description:	Anders Kaseorg and Evan Broder discovered vulnerability in sudo, a program designed to allow a sysadmin to give limited root privileges to users, that allows a user with sudo permissions on certain programs to use those programs with an untrusted value of PATH. This could possibly lead to certain intended restrictions being bypassed, such as the secure_path setting. For the stable distribution, this problem has been fixed in version 1.6.9p17-3 For the unstable distribution , this problem has been fixed in version 1.7.2p7-1, and will migrate to the testing distribution shortly. We recommend that you upgrade your sudo package.
Family:	unix	Class:	patch
Reference(s):	DSA-2062-1 CVE-2010-1646	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	sudo
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section sudo-ldap DPKG is earlier than 1.6.9p17-3 AND sudo DPKG is earlier than 1.6.9p17-3

Definition Id: oval:org.mitre.oval:def:13623

Oval ID:	oval:org.mitre.oval:def:13623
Title:	DSA-1934-1 apache2 -- multiple issues
Description:	A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partial mitigation against this attack, this apache2 update disables client-initiated renegotiations. This should fix the vulnerability for the majority of Apache configurations in use. NOTE: This is not a complete fix for the problem. The attack is still possible in configurations where the server initiates the renegotiation. This is the case for the following configurations: - - The "SSLVerifyClient" directive is used in a Directory or Location context. - - The "SSLCipherSuite" directive is used in a Directory or Location context. As a workaround, you may rearrange your configuration in a way that SSLVerifyClient and SSLCipherSuite are only used on the server or virtual host level. A complete fix for the problem will require a protocol change. Further information will be included in a separate announcement about this issue. In addition, this update fixes the following issues in Apache's mod_proxy_ftp: CVE-2009-3094: Insufficient input validation in the mod_proxy_ftp module allowed remote FTP servers to cause a denial of service via a malformed reply to an EPSV command. CVE-2009-3095: Insufficient input validation in the mod_proxy_ftp module allowed remote authenticated attackers to bypass intended access restrictions and send arbitrary FTP commands to an FTP server. For the stable distribution, these problems have been fixed in version 2.2.9-10+lenny6. This version also includes some non-security bug fixes that were scheduled for inclusion in the next stable point release. The oldstable distribution, these problems have been fixed in version 2.2.3-4+etch11. For the testing distribution and the unstable distribution, these problems will be fixed in version 2.2.14-2. This advisory also provides updated apache2-mpm-itk packages which have been recompiled against the new apache2 packages. Updated apache2-mpm-itk packages for the armel architecture are not included yet. They will be released as soon as they become available. We recommend that you upgrade your apache2 and apache2-mpm-itk packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1934-1 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.9-10+lenny6 AND apache2-src DPKG is earlier than 2.2.9-10+lenny6 AND apache2 DPKG is earlier than 2.2.9-10+lenny6 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-threaded-dev DPKG is earlier than 2.2.9-10+lenny6 AND apache2-utils DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-worker DPKG is earlier than 2.2.9-10+lenny6 AND apache2.2-common DPKG is earlier than 2.2.9-10+lenny6 AND apache2-suexec-custom DPKG is earlier than 2.2.9-10+lenny6 AND apache2-suexec DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-prefork DPKG is earlier than 2.2.9-10+lenny6 AND apache2-dbg DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-event DPKG is earlier than 2.2.9-10+lenny6 AND apache2-prefork-dev DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-itk DPKG is earlier than 2.2.6-02-1+lenny2+b2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.3-4+etch11 AND apache2-doc DPKG is earlier than 2.2.3-4+etch11 AND apache2-src DPKG is earlier than 2.2.3-4+etch11 AND apache2 DPKG is earlier than 2.2.3-4+etch11 AND apache2-utils DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-worker DPKG is earlier than 2.2.3-4+etch11 AND apache2.2-common DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-prefork DPKG is earlier than 2.2.3-4+etch11 AND apache2-threaded-dev DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-event DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-itk DPKG is earlier than 2.2.3-01-2+etch4+b1 AND apache2-prefork-dev DPKG is earlier than 2.2.3-4+etch11

Definition Id: oval:org.mitre.oval:def:13737

Oval ID:	oval:org.mitre.oval:def:13737
Title:	DSA-1874-1 nss -- several
Description:	Several vulnerabilities have been discovered in the Network Security Service libraries. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2404 Moxie Marlinspike discovered that a buffer overflow in the regular expression parser could lead to the execution of arbitrary code. CVE-2009-2408 Dan Kaminsky discovered that NULL characters in certificate names could lead to man-in-the-middle attacks by tricking the user into accepting a rogue certificate. CVE-2009-2409 Certificates with MD2 hash signatures are no longer accepted since they’re no longer considered cryptographically secure. The old stable distribution doesn’t contain nss. For the stable distribution, these problems have been fixed in version 3.12.3.1-0lenny1. For the unstable distribution, these problems have been fixed in version 3.12.3.1-1. We recommend that you upgrade your nss packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1874-1 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0lenny1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0lenny1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0lenny1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0lenny1

Definition Id: oval:org.mitre.oval:def:13780

Oval ID:	oval:org.mitre.oval:def:13780
Title:	USN-810-2 -- nspr update
Description:	USN-810-1 fixed vulnerabilities in NSS. This update provides the NSPR needed to use the new NSS. Original advisory details: Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service or execute arbitrary code as the user invoking the program. Moxie Marlinspike and Dan Kaminsky independently discovered that NSS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Dan Kaminsky discovered NSS would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site
Family:	unix	Class:	patch
Reference(s):	USN-810-2 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 8.04 Ubuntu 9.04	Product(s):	nspr
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnspr4-dev DPKG is earlier than 4.7.5-0ubuntu0.8.10.1 AND libnspr4-0d-dbg DPKG is earlier than 4.7.5-0ubuntu0.8.10.1 AND libnspr4-0d DPKG is earlier than 4.7.5-0ubuntu0.8.10.1 OR Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnspr4-dev DPKG is earlier than 4.7.5-0ubuntu0.8.04.1 AND libnspr4-0d-dbg DPKG is earlier than 4.7.5-0ubuntu0.8.04.1 AND libnspr4-0d DPKG is earlier than 4.7.5-0ubuntu0.8.04.1 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnspr4-dev DPKG is earlier than 4.7.5-0ubuntu0.9.04.1 AND libnspr4-0d-dbg DPKG is earlier than 4.7.5-0ubuntu0.9.04.1 AND libnspr4-0d DPKG is earlier than 4.7.5-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13850

Oval ID:	oval:org.mitre.oval:def:13850
Title:	USN-810-1 -- nss vulnerabilities
Description:	Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service or execute arbitrary code as the user invoking the program. Moxie Marlinspike and Dan Kaminsky independently discovered that NSS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Dan Kaminsky discovered NSS would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site
Family:	unix	Class:	patch
Reference(s):	USN-810-1 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 8.04 Ubuntu 9.04	Product(s):	nss
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-0d DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0ubuntu0.8.10.1 OR Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-0d DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0ubuntu0.8.04.1 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libnss3-dev DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-0d DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-1d DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1 AND libnss3-tools DPKG is earlier than 3.12.3.1-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13869

Oval ID:	oval:org.mitre.oval:def:13869
Title:	USN-858-1 -- openldap2.2 vulnerability
Description:	It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.
Family:	unix	Class:	patch
Reference(s):	USN-858-1 CVE-2009-3767	Version:	5
Platform(s):	Ubuntu 6.06	Product(s):	openldap2.2
Definition Synopsis:
Ubuntu 6.06 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc Packages section ldap-utils DPKG is earlier than 2.2.26-5ubuntu2.9 AND libldap-2.2-7 DPKG is earlier than 2.2.26-5ubuntu2.9 AND slapd DPKG is earlier than 2.2.26-5ubuntu2.9

Definition Id: oval:org.mitre.oval:def:20225

Oval ID:	oval:org.mitre.oval:def:20225
Title:	DSA-1943-1 openldap openldap2.3 - SSL certificate
Description:	It was discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
Family:	unix	Class:	patch
Reference(s):	DSA-1943-1 CVE-2009-3767	Version:	5
Platform(s):	Debian GNU/Linux 4.0 Debian GNU/Linux 5.0	Product(s):	openldap2.3 openldap
Definition Synopsis:
Release section Debian GNU/Linux 4.0 is installed. AND openldap2.3 DPKG is earlier than 0:2.3.30-5+etch3 AND Release section Debian GNU/Linux 5.0 is installed AND openldap DPKG is earlier than 0:2.4.11-1+lenny1

Definition Id: oval:org.mitre.oval:def:20357

Oval ID:	oval:org.mitre.oval:def:20357
Title:	Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	4
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX400-201103403-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201103403-SG is not installed

Definition Id: oval:org.mitre.oval:def:20886

Oval ID:	oval:org.mitre.oval:def:20886
Title:	"Record of death" vulnerability
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0433	Version:	4
Platform(s):	IBM AIX 6.1	Product(s):
Definition Synopsis:
IBM AIX 6.1 is installed AND filesets openssl.base less than 0.9.8.1103 AND OpenSSL-fips.base less than 12.9.8.1103

Definition Id: oval:org.mitre.oval:def:20930

Oval ID:	oval:org.mitre.oval:def:20930
Title:	"Record of death" vulnerability
Description:	OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3245	Version:	4
Platform(s):	IBM AIX 6.1	Product(s):
Definition Synopsis:
IBM AIX 6.1 is installed AND filesets openssl.base less than 0.9.8.1103 AND OpenSSL-fips.base less than 12.9.8.1103

Definition Id: oval:org.mitre.oval:def:21255

Oval ID:	oval:org.mitre.oval:def:21255
Title:	RHSA-2010:0155: java-1.4.2-ibm security and bug fix update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0155-01 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.4-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:21587

Oval ID:	oval:org.mitre.oval:def:21587
Title:	RHSA-2010:0165: nss security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0165-01 CESA-2010:0165 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	nspr nss
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section nspr-devel is earlier than 0:4.8.4-1.el5_4 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4

Definition Id: oval:org.mitre.oval:def:21799

Oval ID:	oval:org.mitre.oval:def:21799
Title:	RHSA-2010:0198: openldap security and bug fix update (Moderate)
Description:	libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0198-04 CVE-2009-3767	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	openldap
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section openldap-devel is earlier than 0:2.3.43-12.el5 AND openldap-clients is earlier than 0:2.3.43-12.el5 AND openldap-servers-sql is earlier than 0:2.3.43-12.el5 AND compat-openldap is earlier than 0:2.3.43_2.2.29-12.el5 AND openldap is earlier than 0:2.3.43-12.el5 AND openldap-servers is earlier than 0:2.3.43-12.el5 AND openldap-servers-overlays is earlier than 0:2.3.43-12.el5

Definition Id: oval:org.mitre.oval:def:21828

Oval ID:	oval:org.mitre.oval:def:21828
Title:	RHSA-2010:0166: gnutls security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0166-01 CESA-2010:0166 CVE-2009-2409 CVE-2009-3555	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	gnutls
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8 AND gnutls is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:21877

Oval ID:	oval:org.mitre.oval:def:21877
Title:	RHSA-2010:0164: openssl097a security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0164-01 CESA-2010:0164 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl097a
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:21964

Oval ID:	oval:org.mitre.oval:def:21964
Title:	RHSA-2010:0347: nss_db security update (Moderate)
Description:	The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0347-01 CESA-2010:0347 CVE-2010-0826	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	nss_db
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND nss_db is earlier than 0:2.2-35.4.el5_5

Definition Id: oval:org.mitre.oval:def:22140

Oval ID:	oval:org.mitre.oval:def:22140
Title:	RHSA-2010:0475: sudo security update (Moderate)
Description:	The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0475-01 CESA-2010:0475 CVE-2010-1646	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	sudo
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND sudo is earlier than 0:1.7.2p1-7.el5_5

Definition Id: oval:org.mitre.oval:def:22172

Oval ID:	oval:org.mitre.oval:def:22172
Title:	RHSA-2010:0273: curl security, bug fix and enhancement update (Moderate)
Description:	content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0273-05 CVE-2010-0734	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	curl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section curl is earlier than 0:7.15.5-9.el5 AND curl-devel is earlier than 0:7.15.5-9.el5

Definition Id: oval:org.mitre.oval:def:22196

Oval ID:	oval:org.mitre.oval:def:22196
Title:	RHSA-2010:0162: openssl security update (Important)
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0162-01 CESA-2010:0162 CVE-2009-3245 CVE-2009-3555 CVE-2010-0433	Version:	42
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section openssl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6

Definition Id: oval:org.mitre.oval:def:22412

Oval ID:	oval:org.mitre.oval:def:22412
Title:	ELSA-2009:1186: nspr and nss security, bug fix, and enhancement update (Critical)
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1186-01 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x rpm test nspr-devel is earlier than 0:4.7.4-1.el5_3.1 AND nspr is earlier than 0:4.7.4-1.el5_3.1 AND nss is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2

Definition Id: oval:org.mitre.oval:def:22820

Oval ID:	oval:org.mitre.oval:def:22820
Title:	ELSA-2009:1579: httpd security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1579-02 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	httpd
Definition Synopsis:
Oracle Linux 5.x rpm test httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND httpd is earlier than 0:2.2.3-31.el5_4.2

Definition Id: oval:org.mitre.oval:def:22913

Oval ID:	oval:org.mitre.oval:def:22913
Title:	ELSA-2010:0155: java-1.4.2-ibm security and bug fix update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0155-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.4-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22993

Oval ID:	oval:org.mitre.oval:def:22993
Title:	ELSA-2010:0165: nss security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0165-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x rpm test nspr-devel is earlier than 0:4.8.4-1.el5_4 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4

Definition Id: oval:org.mitre.oval:def:22995

Oval ID:	oval:org.mitre.oval:def:22995
Title:	ELSA-2010:0475: sudo security update (Moderate)
Description:	The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0475-01 CVE-2010-1646	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	sudo
Definition Synopsis:
Oracle Linux 5.x AND sudo is earlier than 0:1.7.2p1-7.el5_5

Definition Id: oval:org.mitre.oval:def:23000

Oval ID:	oval:org.mitre.oval:def:23000
Title:	ELSA-2010:0166: gnutls security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0166-01 CVE-2009-2409 CVE-2009-3555	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x rpm test gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8 AND gnutls is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:23020

Oval ID:	oval:org.mitre.oval:def:23020
Title:	ELSA-2010:0273: curl security, bug fix and enhancement update (Moderate)
Description:	content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0273-05 CVE-2010-0734	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	curl
Definition Synopsis:
Oracle Linux 5.x rpm test curl is earlier than 0:7.15.5-9.el5 AND curl-devel is earlier than 0:7.15.5-9.el5

Definition Id: oval:org.mitre.oval:def:23047

Oval ID:	oval:org.mitre.oval:def:23047
Title:	ELSA-2010:0198: openldap security and bug fix update (Moderate)
Description:	libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0198-04 CVE-2009-3767	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	openldap
Definition Synopsis:
Oracle Linux 5.x rpm test openldap-devel is earlier than 0:2.3.43-12.el5 AND openldap-clients is earlier than 0:2.3.43-12.el5 AND openldap-servers-sql is earlier than 0:2.3.43-12.el5 AND compat-openldap is earlier than 0:2.3.43_2.2.29-12.el5 AND openldap is earlier than 0:2.3.43-12.el5 AND openldap-servers is earlier than 0:2.3.43-12.el5 AND openldap-servers-overlays is earlier than 0:2.3.43-12.el5

Definition Id: oval:org.mitre.oval:def:23054

Oval ID:	oval:org.mitre.oval:def:23054
Title:	ELSA-2010:0162: openssl security update (Important)
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0162-01 CVE-2009-3245 CVE-2009-3555 CVE-2010-0433	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x rpm test openssl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6

Definition Id: oval:org.mitre.oval:def:23085

Oval ID:	oval:org.mitre.oval:def:23085
Title:	ELSA-2010:0347: nss_db security update (Moderate)
Description:	The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0347-01 CVE-2010-0826	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	nss_db
Definition Synopsis:
Oracle Linux 5.x AND nss_db is earlier than 0:2.2-35.4.el5_5

Definition Id: oval:org.mitre.oval:def:23090

Oval ID:	oval:org.mitre.oval:def:23090
Title:	ELSA-2010:0164: openssl097a security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0164-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	openssl097a
Definition Synopsis:
Oracle Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:24792

Oval ID:	oval:org.mitre.oval:def:24792
Title:	Vulnerability in OpenSSL before 0.9.8n, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash)
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0433	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.8 before 0.9.8n AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8 before 0.9.8n (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8n ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8n ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8n under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25097

Oval ID:	oval:org.mitre.oval:def:25097
Title:	Vulnerability in OpenSSL before 0.9.8i, allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.1c before 0.9.8i AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.1c before 0.9.8i (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25158

Oval ID:	oval:org.mitre.oval:def:25158
Title:	Vulnerability in OpenSSL before 0.9.8m, does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c
Description:	OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3245	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.8 before 0.9.8m AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8 before 0.9.8m (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8m ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8m ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8m under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25180

Oval ID:	oval:org.mitre.oval:def:25180
Title:	Vulnerability in OpenSSL 0.9.8 through 0.9.8k, might allow remote attackers to spoof certificates
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.8 before 0.9.8k AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8 before 0.9.8k (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8k ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8k ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8k Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:27295

Oval ID:	oval:org.mitre.oval:def:27295
Title:	DEPRECATED: ELSA-2010-0164 -- openssl097a security update (moderate)
Description:	[0.9.7a-9.2] - CVE-2009-3555 - support the secure renegotiation RFC (#533125)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0164 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl097a
Definition Synopsis:
Oracle Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:27748

Oval ID:	oval:org.mitre.oval:def:27748
Title:	DEPRECATED: ELSA-2010-0162 -- openssl security update (important)
Description:	[0.9.8e-12.6] - fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924) [0.9.8e-12.5] - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which in the RHEL-5 and newer versions will crash in such case (#569774) [0.9.8e-12.4] - do not disable SSLv2 in the renegotiation patch - SSLv2 does not support renegotiation - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT [0.9.8e-12.3] - mention the RFC5746 in the CVE-2009-3555 doc [0.9.8e-12.2] - fix CVE-2009-3555 - support the safe renegotiation extension and do not allow legacy renegotiation on the server by default (#533125)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0162 CVE-2010-0433 CVE-2009-3245 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6

Definition Id: oval:org.mitre.oval:def:27777

Oval ID:	oval:org.mitre.oval:def:27777
Title:	DEPRECATED: ELSA-2010-0475 -- sudo security update (moderate)
Description:	[1.7.2p1-7] - added patch that fixes insufficient environment sanitization issue (#598154) Resolves: #598381
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0475 CVE-2010-1646	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	sudo
Definition Synopsis:
Oracle Linux 5.x AND sudo is earlier than 0:1.7.2p1-7.el5_5

Definition Id: oval:org.mitre.oval:def:27881

Oval ID:	oval:org.mitre.oval:def:27881
Title:	DEPRECATED: ELSA-2010-0166 -- gnutls security update (moderate)
Description:	[1.4.1-3.8] - fix safe renegotiation on SSL3 protocol [1.4.1-3.7] - implement safe renegotiation - CVE-2009-3555 (#533125) - do not allow MD2 in certificate signatures by default - CVE-2009-2409 (#510197)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0166 CVE-2009-2409 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x Packages match section gnutls is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:27991

Oval ID:	oval:org.mitre.oval:def:27991
Title:	DEPRECATED: ELSA-2010-0347 -- nss_db security update (moderate)
Description:	[2.2-35.4] - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG (#580542, CVE-2010-0826)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0347 CVE-2010-0826	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	nss_db
Definition Synopsis:
Oracle Linux 5.x AND nss_db is earlier than 0:2.2-35.4.el5_5

Definition Id: oval:org.mitre.oval:def:28141

Oval ID:	oval:org.mitre.oval:def:28141
Title:	DEPRECATED: ELSA-2010-0273 -- curl security, bug fix and enhancement update (moderate)
Description:	[7.15.5-9] - http://curl.haxx.se/docs/adv_20100209.html (#565408) [7.15.5-8] - mention lack of IPv6, FTPS and LDAP support while using a socks proxy (#473128) - avoid tight loop if an upload connection is broken (#479967) - add options --ftp-account and --ftp-alternative-to-user to program help (#517084) - fix crash when reusing connection after negotiate-auth (#517199) - support for CRL loading from a PEM file (#532069) [7.15.5-7] - sync patch for CVE-2007-0037 with 5.3.Z Related: #485290 [7.15.5-6] - fix CVE-2009-2417 Resolves: #516258 [7.15.5-5] - forwardport one hunk from upstream curl-7.15.1 Related: #485290 [7.15.5-4] - fix hunk applied to wrong place due to nonzero patch fuzz Related: #485290 [7.15.5-3] - fix CVE-2007-0037 Resolves: #485290
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0273 CVE-2010-0734	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	curl
Definition Synopsis:
Oracle Linux 5.x Packages match section curl is earlier than 0:7.15.5-9.el5 AND curl-devel is earlier than 0:7.15.5-9.el5

Definition Id: oval:org.mitre.oval:def:28188

Oval ID:	oval:org.mitre.oval:def:28188
Title:	DEPRECATED: ELSA-2010-0768 -- java-1.6.0-openjdk security and bug fix update (important)
Description:	[1.6.0.0-1.16.b17.0.1.el5] - Add oracle-enterprise.patch [1.6.0.0-1.16.b17.el5] - Updated 1.7.5 tarball (contains additional security fixes) - Resolves: bz639951 [1.6.0.0-1.15.b17.el5] - Rebuild - Resolves: bz639951 [1.6.0.0-1.14.b17.el5] - Synched with el6 branch - Updated to IcedTea 1.7.5 - Resolves: bz639951 - Also resolves 619800 and 621303
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0768 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.16.b17.0.1.el5

Definition Id: oval:org.mitre.oval:def:28253

Oval ID:	oval:org.mitre.oval:def:28253
Title:	DEPRECATED: ELSA-2010-0054 -- openssl security update (moderate)
Description:	[0.9.8e-12.1] - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197) - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data() is called prematurely by application (#546707)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0054 CVE-2009-4355 CVE-2009-2409	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-12.el5_4.1 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.1 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.1

Definition Id: oval:org.mitre.oval:def:28269

Oval ID:	oval:org.mitre.oval:def:28269
Title:	DEPRECATED: ELSA-2010-0339 -- java-1.6.0-openjdk security update (important)
Description:	[1:1.6.0.0-1.11.b16.0.1.el5] - Add oracle-enterprise.patch [1:1.6.0.0-1.11.b16.el5] - Remove javaws alternative due to conflict with java-1.6.0-sun's alternatives [1:1.6.0-1.10.b16] - Update to openjdk build b16 - Update to icedtea6-1.6 - Added tzdata-java requirement - Added autoconf and automake build requirement - Added tzdata-java requirement - Added java-1.6.0-openjdk-gcc-stack-markings.patch - Added java-1.6.0-openjdk-memory-barriers.patch - Added java-1.6.0-openjdk-jar-misc.patch - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch - Added java-1.6.0-openjdk-securitypatches-20100323.patch - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402 - Resolves: rhbz#576124 [1:1.6.0-1.8.b09] - Added java-1.6.0-openjdk-debuginfo.patch - Added java-1.6.0-openjdk-elf-debuginfo.patch
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0339 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.11.b16.0.1.el5

Definition Id: oval:org.mitre.oval:def:28271

Oval ID:	oval:org.mitre.oval:def:28271
Title:	DEPRECATED: ELSA-2010-0198 -- openldap security and bug fix update (moderate)
Description:	[2.3.43-12] - updated spec file, so the compat-libs linking patch applies correctly [2.3.43-11] - backported patch to handle null character in TLS certificates (#560912) [2.3.43-10] - updated chase-referral patch to compile cleanly - updated init script (#562714) [2.3.43-9] - updated ldap.sysconf to include SLAPD_LDAP, SLAPD_LDAPS and SLAPD_LDAPI options (#559520) [2.3.43-8] - fixed connection freeze when TLSVerifyClient = allow (#509230) [2.3.43-7] - fixed chasing referrals in libldap (#510522) [2.3.43-6] - fixed possible double free() in rwm overlay (#495628) - updated slapd man page and slapcat usage string (#468206) - updated default config for slapd - deleted syncprov module (#466937) - fixed migration tools autofs generated format (#460331) - fixed migration tools numbers detection in /etc/shadow (#113857) - fixed migration tools base ldif (#104585) [2.3.43-5] - implementation of limit adjustment before starting slapd (#527313) - init script no longer executes script in /tmp (#483356) - slapd not starting with ldap:/// every time (#481003) - delay between TERM and KILL when shutting down slapd (#452064) [2.3.43-4] - fixed compat libs linking (#503734) - activated lightweight dispatcher feature (#507276) - detection of timeout after failed result (#495701
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0198 CVE-2009-3767	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openldap
Definition Synopsis:
Oracle Linux 5.x Packages match section openldap is earlier than 0:2.3.43-12.el5 AND compat-openldap is earlier than 0:2.3.43_2.2.29-12.el5 AND openldap-clients is earlier than 0:2.3.43-12.el5 AND openldap-devel is earlier than 0:2.3.43-12.el5 AND openldap-servers is earlier than 0:2.3.43-12.el5 AND openldap-servers-overlays is earlier than 0:2.3.43-12.el5 AND openldap-servers-sql is earlier than 0:2.3.43-12.el5

Definition Id: oval:org.mitre.oval:def:29071

Oval ID:	oval:org.mitre.oval:def:29071
Title:	USN-810-3 -- NSS regression
Description:	USN-810-1 fixed vulnerabilities in NSS. Jozsef Kadlecsik noticed that the new libraries on amd64 did not correctly set stack memory flags, and caused applications using NSS (e.g. Firefox) to have an executable stack. This reduced the effectiveness of some defensive security protections. This update fixes the problem.
Family:	unix	Class:	patch
Reference(s):	USN-810-3 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	3
Platform(s):	Ubuntu 9.04 Ubuntu 8.10 Ubuntu 8.04	Product(s):	nss
Definition Synopsis:
Ubuntu 9.04 release section Ubuntu 9.04 is installed AND libnss3-1d is earlier than 0:3.12.3.1-0ubuntu0.9.04.2 AND Ubuntu 8.10 release section Ubuntu 8.10 is installed AND libnss3-1d is earlier than 0:3.12.3.1-0ubuntu0.8.10.2 AND Ubuntu 8.04 release section Ubuntu 8.04 is installed AND libnss3-1d is earlier than 0:3.12.3.1-0ubuntu0.8.04.2

Definition Id: oval:org.mitre.oval:def:29169

Oval ID:	oval:org.mitre.oval:def:29169
Title:	RHSA-2009:1186 -- nspr and nss security, bug fix, and enhancement update (Critical)
Description:	Updated nspr and nss packages that fix security issues, bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team.
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1186 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	3
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	nspr nss
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section nspr-devel is earlier than 0:4.7.4-1.el5_3.1 AND nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nspr is earlier than 0:4.7.4-1.el5_3.1 AND nss is earlier than 0:3.12.3.99.3-1.el5_3.2 AND nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2

Definition Id: oval:org.mitre.oval:def:29317

Oval ID:	oval:org.mitre.oval:def:29317
Title:	RHSA-2009:1579 -- httpd security update (Moderate)
Description:	Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session (for example, an HTTPS connection to a website). This could force the server to process an attacker's request as if authenticated using the victim's credentials. This update partially mitigates this flaw for SSL sessions to HTTP servers using mod_ssl by rejecting client-requested renegotiation. (CVE-2009-3555)
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1579 CESA-2009:1579-CentOS 3 CESA-2009:1579-CentOS 5 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 3 CentOS Linux 3 CentOS Linux 5	Product(s):	httpd
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND httpd is earlier than 0:2.2.3-31.el5_4.2 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND Red Hat Enterprise Linux 3 release section The operating system installed on the system is Red Hat Enterprise Linux 3 Packages match section httpd is earlier than 0:2.0.46-77.ent AND httpd-devel is earlier than 0:2.0.46-77.ent AND mod_ssl is earlier than 0:2.0.46-77.ent AND CentOS Linux 5 release section The operating system installed on the system is CentOS Linux 5.x Packages match section httpd is earlier than 0:2.2.3-31.el5.centos.2 AND httpd-devel is earlier than 0:2.2.3-31.el5.centos.2 AND httpd-manual is earlier than 0:2.2.3-31.el5.centos.2 AND mod_ssl is earlier than 0:2.2.3-31.el5.centos.2

Definition Id: oval:org.mitre.oval:def:6631

Oval ID:	oval:org.mitre.oval:def:6631
Title:	Network Security Services Library Supports Certificates With Weak MD2 Hash Signatures
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005401-SG is not installed

Definition Id: oval:org.mitre.oval:def:6640

Oval ID:	oval:org.mitre.oval:def:6640
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3245	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:6681

Oval ID:	oval:org.mitre.oval:def:6681
Title:	VMware ESX, Service Console update for NSS_db.
Description:	The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0826	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009407-SG is not installed.

Definition Id: oval:org.mitre.oval:def:6701

Oval ID:	oval:org.mitre.oval:def:6701
Title:	DSA-2023 curl -- buffer overflow
Description:	Wesley Miaw discovered that libcurl, a multi-protocol file transfer library, is prone to a buffer overflow via the callback function when an application relies on libcurl to automatically uncompress data. Note that this only affects applications that trust libcurl’s maximum limit for a fixed buffer size and do not perform any sanity checks themselves.
Family:	unix	Class:	patch
Reference(s):	DSA-2023 CVE-2010-0734	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	curl
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is alpha AND Installed architecture is arm Packages section libcurl4-gnutls-dev is earlier than 7.18.2-8lenny4 AND libcurl4-openssl-dev is earlier than 7.18.2-8lenny4 AND libcurl3-gnutls is earlier than 7.18.2-8lenny4 AND libcurl3-dbg is earlier than 7.18.2-8lenny4 AND libcurl3 is earlier than 7.18.2-8lenny4 AND curl is earlier than 7.18.2-8lenny4

Definition Id: oval:org.mitre.oval:def:6718

Oval ID:	oval:org.mitre.oval:def:6718
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0433	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:6756

Oval ID:	oval:org.mitre.oval:def:6756
Title:	VMware ESX, Service Console update for cURL.
Description:	content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0734	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009409-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7155

Oval ID:	oval:org.mitre.oval:def:7155
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7274

Oval ID:	oval:org.mitre.oval:def:7274
Title:	VMware ESX, Service Console update for OpenLDAP.
Description:	libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3767	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009408-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7315

Oval ID:	oval:org.mitre.oval:def:7315
Title:	TLS/SSL Renegotiation Vulnerability
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable Seamonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird version less than 3.0.4 OR Vulnerable Microsoft Windows XP x86 Microsoft Windows XP (32-bit) is installed AND the version of schannel.dll is less than 5.1.2600.6006 OR Vulnerable Microsoft Windows XP x64, Windows Server 2003 x86/x64/ia64 XP x64/server 2003 x86/x64/ia64 Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND the version of schannel.dll is less than 5.2.3790.4724 OR Vulnerable Microsoft Windows Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.0.6001.18490 OR LDR the version of schannel.dll is greater than or equal to 6.0.6001.22000 AND the version of schannel.dll is less than 6.0.6001.22709 OR Vulnerable Microsoft Windows Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.0.6002.18269 OR LDR the version of schannel.dll is greater than or equal to 6.0.6002.22000 AND the version of schannel.dll is less than 6.0.6002.22422 OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 7 x86/x64, Server 2008 R2 x64/ia64 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.1.7600.16612 OR LDR the version of schannel.dll is greater than or equal to 6.1.7600.20000 AND the version of schannel.dll is less than 6.1.7600.20735

Definition Id: oval:org.mitre.oval:def:7338

Oval ID:	oval:org.mitre.oval:def:7338
Title:	VMware ESX, Service Console update for sudo.
Description:	The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-1646	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009410-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7478

Oval ID:	oval:org.mitre.oval:def:7478
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7899

Oval ID:	oval:org.mitre.oval:def:7899
Title:	DSA-1943 openldap openldap2.3 -- insufficient input validation
Description:	It was discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, when OpenSSL is used, does not properly handle a "\0" character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
Family:	unix	Class:	patch
Reference(s):	DSA-1943 CVE-2009-3767	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	openldap openldap2.3
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is hppa AND Packages section slapd-dbg is earlier than 2.4.11-1+lenny1 AND libldap-2.4-2 is earlier than 2.4.11-1+lenny1 AND libldap-2.4-2-dbg is earlier than 2.4.11-1+lenny1 AND ldap-utils is earlier than 2.4.11-1+lenny1 AND libldap2-dev is earlier than 2.4.11-1+lenny1 AND slapd is earlier than 2.4.11-1+lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Packages section libldap-2.3-0 is earlier than 2.3.30-5+etch3 AND ldap-utils is earlier than 2.3.30-5+etch3 AND slapd is earlier than 2.3.30-5+etch3

Definition Id: oval:org.mitre.oval:def:7973

Oval ID:	oval:org.mitre.oval:def:7973
Title:	Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Involving Handshake Renegotiation Affects Applications Utilizing Network Security Services (NSS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	1
Platform(s):	Sun Solaris 8 Sun Solaris 9 Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 8 (SPARC) meets Sun Alert 273350 Solaris 8 (SPARC) is installed AND NOT Patch 119209-22 or later installed AND SUNWtls is installed OR Solaris 9 (SPARC) meets Sun Alert 273350 Solaris 9 (SPARC) is installed AND NOT Patch 119211-22 or later installed AND SUNWtls is installed OR Solaris 10 (SPARC) meets Sun Alert 273350 Solaris 10 (SPARC) is installed AND NOT Patch 119213-21 or later installed AND SUNWtls is installed OR Solaris 9 (x86) meets Sun Alert 273350 Solaris 9 (x86) is installed AND NOT Patch 119212-22 or later installed AND SUNWtls is installed OR Solaris 10 (x86) meets Sun Alert 273350 Solaris 10 (x86) is installed AND NOT Patch 119214-21 or later installed AND SUNWtls is installed

Definition Id: oval:org.mitre.oval:def:8111

Oval ID:	oval:org.mitre.oval:def:8111
Title:	DSA-1874 nss -- several vulnerabilities
Description:	Several vulnerabilities have been discovered in the Network Security Service libraries. The Common Vulnerabilities and Exposures project identifies the following problems: Moxie Marlinspike discovered that a buffer overflow in the regular expression parser could lead to the execution of arbitrary code. Dan Kaminsky discovered that NULL characters in certificate names could lead to man-in-the-middle attacks by tricking the user into accepting a rogue certificate. Certificates with MD2 hash signatures are no longer accepted since they're no longer considered cryptographically secure. The old stable distribution (etch) doesn't contain nss.
Family:	unix	Class:	patch
Reference(s):	DSA-1874 CVE-2009-2404 CVE-2009-2408 CVE-2009-2409	Version:	3
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section libnss3-dev is earlier than 3.12.3.1-0lenny1 AND libnss3-1d-dbg is earlier than 3.12.3.1-0lenny1 AND libnss3-tools is earlier than 3.12.3.1-0lenny1 AND libnss3-1d is earlier than 3.12.3.1-0lenny1

Definition Id: oval:org.mitre.oval:def:8201

Oval ID:	oval:org.mitre.oval:def:8201
Title:	DSA-1934 apache2 -- multiple issues
Description:	A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partial mitigation against this attack, this apache2 update disables client-initiated renegotiations. This should fix the vulnerability for the majority of Apache configurations in use. NOTE: This is not a complete fix for the problem. The attack is still possible in configurations where the server initiates the renegotiation. This is the case for the following configurations (the information in the changelog of the updated packages is slightly inaccurate): As a workaround, you may rearrange your configuration in a way that SSLVerifyClient and SSLCipherSuite are only used on the server or virtual host level. A complete fix for the problem will require a protocol change. Further information will be included in a separate announcement about this issue. In addition, this update fixes the following issues in Apache's mod_proxy_ftp: Insufficient input validation in the mod_proxy_ftp module allowed remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. Insufficient input validation in the mod_proxy_ftp module allowed remote authenticated attackers to bypass intended access restrictions and send arbitrary FTP commands to an FTP server. The oldstable distribution (etch), these problems have been fixed in version 2.2.3-4+etch11.
Family:	unix	Class:	patch
Reference(s):	DSA-1934 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc is earlier than 2.2.9-10+lenny6 AND apache2-src is earlier than 2.2.9-10+lenny6 AND apache2 is earlier than 2.2.9-10+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-utils is earlier than 2.2.9-10+lenny6 AND apache2-mpm-worker is earlier than 2.2.9-10+lenny6 AND apache2.2-common is earlier than 2.2.9-10+lenny6 AND apache2-suexec-custom is earlier than 2.2.9-10+lenny6 AND apache2-suexec is earlier than 2.2.9-10+lenny6 AND apache2-threaded-dev is earlier than 2.2.9-10+lenny6 AND apache2-dbg is earlier than 2.2.9-10+lenny6 AND apache2-mpm-event is earlier than 2.2.9-10+lenny6 AND apache2-mpm-prefork is earlier than 2.2.9-10+lenny6 AND apache2-prefork-dev is earlier than 2.2.9-10+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is hppa AND Installed architecture is sparc AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND apache2-mpm-itk is earlier than 2.2.6-02-1+lenny2+b2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild is earlier than 2.2.3-4+etch11 AND apache2-doc is earlier than 2.2.3-4+etch11 AND apache2-src is earlier than 2.2.3-4+etch11 AND apache2 is earlier than 2.2.3-4+etch11 AND apache2-utils is earlier than 2.2.3-4+etch11 AND apache2-mpm-worker is earlier than 2.2.3-4+etch11 AND apache2.2-common is earlier than 2.2.3-4+etch11 AND apache2-mpm-prefork is earlier than 2.2.3-4+etch11 AND apache2-threaded-dev is earlier than 2.2.3-4+etch11 AND apache2-mpm-event is earlier than 2.2.3-4+etch11 AND apache2-mpm-itk is earlier than 2.2.3-01-2+etch4+b1 AND apache2-prefork-dev is earlier than 2.2.3-4+etch11

Definition Id: oval:org.mitre.oval:def:8366

Oval ID:	oval:org.mitre.oval:def:8366
Title:	HP-UX Running Apache, Remote Unauthorized Data Injection, Denial of Service (DoS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxwsAPACHE.APACHE2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.PHP version is less than B.2.0.59.13 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.59.13 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.APACHE version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.59.13 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.59.13 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.59.13 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.PHP version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.59.13 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.59.13 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.APACHE version is less than B.2.0.59.13

Definition Id: oval:org.mitre.oval:def:8535

Oval ID:	oval:org.mitre.oval:def:8535
Title:	HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of Service (DoS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02482 HP Release B.11.23 AND filesets tests openssl.OPENSSL-PVT version is less than A.00.09.08l.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.002 AND openssl.OPENSSL-CER version is less than A.00.09.08l.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.002 AND openssl.OPENSSL-INC version is less than A.00.09.08l.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.002 OR Criteria meets HP Security Bulletin HPSBUX02482 HP Release B.11.11 AND filesets tests openssl.OPENSSL-PVT version is less than A.00.09.08l.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.001 AND openssl.OPENSSL-CER version is less than A.00.09.08l.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.001 AND openssl.OPENSSL-INC version is less than A.00.09.08l.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.001 OR Criteria meets HP Security Bulletin HPSBUX02482 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-PRNG version is less than A.00.09.08l.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.003 AND openssl.OPENSSL-CER version is less than A.00.09.08l.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.003 AND openssl.OPENSSL-INC version is less than A.00.09.08l.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.003

Definition Id: oval:org.mitre.oval:def:8594

Oval ID:	oval:org.mitre.oval:def:8594
Title:	VMware Network Security Services (NSS) certificate spoofing vulnerability by using MD2 design flaw
Description:	The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2409	Version:	4
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-200912403-SG is not installed

Definition Id: oval:org.mitre.oval:def:9790

Oval ID:	oval:org.mitre.oval:def:9790
Title:	OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Description:	OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3245	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND openssl096b is earlier than 0:0.9.6b-16.50 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND openssl096b is earlier than 0:0.9.6b-22.46.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND openssl is earlier than 0:0.9.8e-12.el5_4.6

Definition Id: oval:org.mitre.oval:def:9856

Oval ID:	oval:org.mitre.oval:def:9856
Title:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Description:	The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0433	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND openssl is earlier than 0:0.9.8e-12.el5_4.6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Http Server cpe:2.3:a:apache:http_server:2.2.9:::::::* cpe:2.3:a:apache:http_server:2.2.8:::::::* cpe:2.3:a:apache:http_server:2.2.7:::::::* cpe:2.3:a:apache:http_server:2.2.6:::::::* cpe:2.3:a:apache:http_server:2.2.5:::::::* cpe:2.3:a:apache:http_server:2.2.4:::::::* cpe:2.3:a:apache:http_server:2.2.3:::::::* cpe:2.3:a:apache:http_server:2.2.3::windows::::: cpe:2.3:a:apache:http_server:2.2.2:::::::* cpe:2.3:a:apache:http_server:2.2.2::windows::::: cpe:2.3:a:apache:http_server:2.2.14:::::::* cpe:2.3:a:apache:http_server:2.2.13:::::::* cpe:2.3:a:apache:http_server:2.2.12:::::::* cpe:2.3:a:apache:http_server:2.2.11:::::::* cpe:2.3:a:apache:http_server:2.2.10:::::::* cpe:2.3:a:apache:http_server:2.2.1:::::::* cpe:2.3:a:apache:http_server:2.2.0:::::::* cpe:2.3:a:apache:http_server:2.2:::::::* cpe:2.3:a:apache:http_server:2.1.9:::::::* cpe:2.3:a:apache:http_server:2.1.8:::::::* cpe:2.3:a:apache:http_server:2.1.7:::::::* cpe:2.3:a:apache:http_server:2.1.6:::::::* cpe:2.3:a:apache:http_server:2.1.5:::::::* cpe:2.3:a:apache:http_server:2.1.4:::::::* cpe:2.3:a:apache:http_server:2.1.3:::::::* cpe:2.3:a:apache:http_server:2.1.2:::::::* cpe:2.3:a:apache:http_server:2.1.1:::::::* cpe:2.3:a:apache:http_server:2.1.0:::::::* cpe:2.3:a:apache:http_server:2.1:::::::* cpe:2.3:a:apache:http_server:2.0.9:::::::* cpe:2.3:a:apache:http_server:2.0.65:::::::* cpe:2.3:a:apache:http_server:2.0.64:::::::* cpe:2.3:a:apache:http_server:2.0.63:::::::* cpe:2.3:a:apache:http_server:2.0.61:::::::* cpe:2.3:a:apache:http_server:2.0.60:::::::* cpe:2.3:a:apache:http_server:2.0.59:::::::* cpe:2.3:a:apache:http_server:2.0.58:::::::* cpe:2.3:a:apache:http_server:2.0.58::win32::::: cpe:2.3:a:apache:http_server:2.0.57:::::::* cpe:2.3:a:apache:http_server:2.0.56:::::::* cpe:2.3:a:apache:http_server:2.0.55:::::::* cpe:2.3:a:apache:http_server:2.0.54:::::::* cpe:2.3:a:apache:http_server:2.0.53:::::::* cpe:2.3:a:apache:http_server:2.0.52:::::::* cpe:2.3:a:apache:http_server:2.0.51:::::::* cpe:2.3:a:apache:http_server:2.0.50:::::::* cpe:2.3:a:apache:http_server:2.0.49:::::::* cpe:2.3:a:apache:http_server:2.0.48:::::::* cpe:2.3:a:apache:http_server:2.0.47:::::::* cpe:2.3:a:apache:http_server:2.0.46:::::::* cpe:2.3:a:apache:http_server:2.0.46::win32::::: cpe:2.3:a:apache:http_server:2.0.45:::::::* cpe:2.3:a:apache:http_server:2.0.44:::::::* cpe:2.3:a:apache:http_server:2.0.43:::::::* cpe:2.3:a:apache:http_server:2.0.42:::::::* cpe:2.3:a:apache:http_server:2.0.41:::::::* cpe:2.3:a:apache:http_server:2.0.40:::::::* cpe:2.3:a:apache:http_server:2.0.39:::::::* cpe:2.3:a:apache:http_server:2.0.38:::::::* cpe:2.3:a:apache:http_server:2.0.37:::::::* cpe:2.3:a:apache:http_server:2.0.36:::::::* cpe:2.3:a:apache:http_server:2.0.35:::::::* cpe:2.3:a:apache:http_server:2.0.34:beta:::::: cpe:2.3:a:apache:http_server:2.0.34:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.34:::::::* cpe:2.3:a:apache:http_server:2.0.33:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:::::: cpe:2.3:a:apache:http_server:2.0.32:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.31:::::::* cpe:2.3:a:apache:http_server:2.0.30:::::::* cpe:2.3:a:apache:http_server:2.0.29:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:::::: cpe:2.3:a:apache:http_server:2.0.28:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.27:::::::* cpe:2.3:a:apache:http_server:2.0.26:::::::* cpe:2.3:a:apache:http_server:2.0.25:::::::* cpe:2.3:a:apache:http_server:2.0.24:::::::* cpe:2.3:a:apache:http_server:2.0.23:::::::* cpe:2.3:a:apache:http_server:2.0.22:::::::* cpe:2.3:a:apache:http_server:2.0.21:::::::* cpe:2.3:a:apache:http_server:2.0.20:::::::* cpe:2.3:a:apache:http_server:2.0.19:::::::* cpe:2.3:a:apache:http_server:2.0.18:::::::* cpe:2.3:a:apache:http_server:2.0.17:::::::* cpe:2.3:a:apache:http_server:2.0.16:::::::* cpe:2.3:a:apache:http_server:2.0.15:::::::* cpe:2.3:a:apache:http_server:2.0.14:::::::* cpe:2.3:a:apache:http_server:2.0.13:::::::* cpe:2.3:a:apache:http_server:2.0.12:::::::* cpe:2.3:a:apache:http_server:2.0.11:::::::* cpe:2.3:a:apache:http_server:2.0.0:::::::* cpe:2.3:a:apache:http_server:2.0:::::::* cpe:2.3:a:apache:http_server:2.0:alpha9:::::: cpe:2.3:a:apache:http_server:1.99:::::::* cpe:2.3:a:apache:http_server:1.4.0:::::::* cpe:2.3:a:apache:http_server:1.3.9:::::::* cpe:2.3:a:apache:http_server:1.3.9::win32::::: cpe:2.3:a:apache:http_server:1.3.8:::::::* cpe:2.3:a:apache:http_server:1.3.7:::::::* cpe:2.3:a:apache:http_server:1.3.7::dev::::: cpe:2.3:a:apache:http_server:1.3.68:::::::* cpe:2.3:a:apache:http_server:1.3.65:::::::* cpe:2.3:a:apache:http_server:1.3.6:::::::* cpe:2.3:a:apache:http_server:1.3.6::win32::::: cpe:2.3:a:apache:http_server:1.3.5:::::::* cpe:2.3:a:apache:http_server:1.3.42:::::::* cpe:2.3:a:apache:http_server:1.3.41:::::::* cpe:2.3:a:apache:http_server:1.3.40:::::::* cpe:2.3:a:apache:http_server:1.3.4:::::::* cpe:2.3:a:apache:http_server:1.3.39:::::::* cpe:2.3:a:apache:http_server:1.3.38:::::::* cpe:2.3:a:apache:http_server:1.3.37:::::::* cpe:2.3:a:apache:http_server:1.3.36:::::::* cpe:2.3:a:apache:http_server:1.3.35:::::::* cpe:2.3:a:apache:http_server:1.3.34:::::::* cpe:2.3:a:apache:http_server:1.3.33:::::::* cpe:2.3:a:apache:http_server:1.3.32:::::::* cpe:2.3:a:apache:http_server:1.3.31:::::::* cpe:2.3:a:apache:http_server:1.3.30:::::::* cpe:2.3:a:apache:http_server:1.3.3:::::::* cpe:2.3:a:apache:http_server:1.3.29:::::::* cpe:2.3:a:apache:http_server:1.3.28:::::::* cpe:2.3:a:apache:http_server:1.3.27:::::::* cpe:2.3:a:apache:http_server:1.3.26:::::::* cpe:2.3:a:apache:http_server:1.3.26::win32::::: cpe:2.3:a:apache:http_server:1.3.25:::::::* cpe:2.3:a:apache:http_server:1.3.25::win32::::: cpe:2.3:a:apache:http_server:1.3.24:::::::* cpe:2.3:a:apache:http_server:1.3.24::win32::::: cpe:2.3:a:apache:http_server:1.3.23:::::::* cpe:2.3:a:apache:http_server:1.3.23::win32::::: cpe:2.3:a:apache:http_server:1.3.22:::::::* cpe:2.3:a:apache:http_server:1.3.22::win32::::: cpe:2.3:a:apache:http_server:1.3.20:::::::* cpe:2.3:a:apache:http_server:1.3.20::win32::::: cpe:2.3:a:apache:http_server:1.3.2:::::::* cpe:2.3:a:apache:http_server:1.3.19:::::::* cpe:2.3:a:apache:http_server:1.3.19::win32::::: cpe:2.3:a:apache:http_server:1.3.18:::::::* cpe:2.3:a:apache:http_server:1.3.18::win32::::: cpe:2.3:a:apache:http_server:1.3.17:::::::* cpe:2.3:a:apache:http_server:1.3.17::win32::::: cpe:2.3:a:apache:http_server:1.3.16:::::::* cpe:2.3:a:apache:http_server:1.3.16::win32::::: cpe:2.3:a:apache:http_server:1.3.15:::::::* cpe:2.3:a:apache:http_server:1.3.15::win32::::: cpe:2.3:a:apache:http_server:1.3.14:::::::* cpe:2.3:a:apache:http_server:1.3.14::win32::::: cpe:2.3:a:apache:http_server:1.3.14::mac_os::::: cpe:2.3:a:apache:http_server:1.3.13:::::::* cpe:2.3:a:apache:http_server:1.3.13::win32::::: cpe:2.3:a:apache:http_server:1.3.12:::::::* cpe:2.3:a:apache:http_server:1.3.12::win32::::: cpe:2.3:a:apache:http_server:1.3.11:::::::* cpe:2.3:a:apache:http_server:1.3.11::win32::::: cpe:2.3:a:apache:http_server:1.3.10:::::::* cpe:2.3:a:apache:http_server:1.3.1.1:::::::* cpe:2.3:a:apache:http_server:1.3.1:::::::* cpe:2.3:a:apache:http_server:1.3.0:::::::* cpe:2.3:a:apache:http_server:1.3:::::::* cpe:2.3:a:apache:http_server:1.2.9:::::::* cpe:2.3:a:apache:http_server:1.2.6:::::::* cpe:2.3:a:apache:http_server:1.2.5:::::::* cpe:2.3:a:apache:http_server:1.2.4:::::::* cpe:2.3:a:apache:http_server:1.2.0:::::::* cpe:2.3:a:apache:http_server:1.15.17:::::::* cpe:2.3:a:apache:http_server:1.1.1:::::::* cpe:2.3:a:apache:http_server:1.1:::::::* cpe:2.3:a:apache:http_server:1.0.5:::::::* cpe:2.3:a:apache:http_server:1.0.3:::::::* cpe:2.3:a:apache:http_server:1.0.2:::::::* cpe:2.3:a:apache:http_server:1.0:::::::* cpe:2.3:a:apache:http_server:0.8.14:::::::* cpe:2.3:a:apache:http_server:0.8.11:::::::* cpe:2.3:a:apache:http_server:::::::: cpe:2.3:a:apache:http_server:::win32:::::* cpe:2.3:a:apache:http_server:-:::::::*	179
Application	Curl Libcurl cpe:2.3:a:curl:libcurl:7.19.7:::::::* cpe:2.3:a:curl:libcurl:7.19.6:::::::* cpe:2.3:a:curl:libcurl:7.19.5:::::::* cpe:2.3:a:curl:libcurl:7.19.4:::::::* cpe:2.3:a:curl:libcurl:7.19.3:::::::* cpe:2.3:a:curl:libcurl:7.19.2:::::::* cpe:2.3:a:curl:libcurl:7.19.1:::::::* cpe:2.3:a:curl:libcurl:7.19.0:::::::* cpe:2.3:a:curl:libcurl:7.18.2:::::::* cpe:2.3:a:curl:libcurl:7.18.1:::::::* cpe:2.3:a:curl:libcurl:7.18.0:::::::* cpe:2.3:a:curl:libcurl:7.17.1:::::::* cpe:2.3:a:curl:libcurl:7.17.0:::::::* cpe:2.3:a:curl:libcurl:7.16.3:::::::* cpe:2.3:a:curl:libcurl:7.15.3:::::::* cpe:2.3:a:curl:libcurl:7.15.2:::::::* cpe:2.3:a:curl:libcurl:7.15.1:::::::* cpe:2.3:a:curl:libcurl:7.15:::::::* cpe:2.3:a:curl:libcurl:7.14.1:::::::* cpe:2.3:a:curl:libcurl:7.14:::::::* cpe:2.3:a:curl:libcurl:7.13.2:::::::* cpe:2.3:a:curl:libcurl:7.13.1:::::::* cpe:2.3:a:curl:libcurl:7.13:::::::* cpe:2.3:a:curl:libcurl:7.12.3:::::::* cpe:2.3:a:curl:libcurl:7.12.2:::::::* cpe:2.3:a:curl:libcurl:7.12.1:::::::* cpe:2.3:a:curl:libcurl:7.12.0:::::::* cpe:2.3:a:curl:libcurl:7.12:::::::* cpe:2.3:a:curl:libcurl:7.11.2:::::::* cpe:2.3:a:curl:libcurl:7.11.1:::::::* cpe:2.3:a:curl:libcurl:7.11.0:::::::* cpe:2.3:a:curl:libcurl:7.10.8:::::::* cpe:2.3:a:curl:libcurl:7.10.7:::::::* cpe:2.3:a:curl:libcurl:7.10.6:::::::* cpe:2.3:a:curl:libcurl:7.10.5:::::::*	35
Application	f5 Nginx cpe:2.3:a:f5:nginx:0.8.9:::::::* cpe:2.3:a:f5:nginx:0.8.8:::::::* cpe:2.3:a:f5:nginx:0.8.7:::::::* cpe:2.3:a:f5:nginx:0.8.6:::::::* cpe:2.3:a:f5:nginx:0.8.5:::::::* cpe:2.3:a:f5:nginx:0.8.4:::::::* cpe:2.3:a:f5:nginx:0.8.3:::::::* cpe:2.3:a:f5:nginx:0.8.22:::::::* cpe:2.3:a:f5:nginx:0.8.21:::::::* cpe:2.3:a:f5:nginx:0.8.20:::::::* cpe:2.3:a:f5:nginx:0.8.2:::::::* cpe:2.3:a:f5:nginx:0.8.19:::::::* cpe:2.3:a:f5:nginx:0.8.18:::::::* cpe:2.3:a:f5:nginx:0.8.17:::::::* cpe:2.3:a:f5:nginx:0.8.16:::::::* cpe:2.3:a:f5:nginx:0.8.15:::::::* cpe:2.3:a:f5:nginx:0.8.14:::::::* cpe:2.3:a:f5:nginx:0.8.13:::::::* cpe:2.3:a:f5:nginx:0.8.12:::::::* cpe:2.3:a:f5:nginx:0.8.11:::::::* cpe:2.3:a:f5:nginx:0.8.10:::::::* cpe:2.3:a:f5:nginx:0.8.1:::::::* cpe:2.3:a:f5:nginx:0.8.0:::::::* cpe:2.3:a:f5:nginx:0.7.9:::::::* cpe:2.3:a:f5:nginx:0.7.8:::::::* cpe:2.3:a:f5:nginx:0.7.7:::::::* cpe:2.3:a:f5:nginx:0.7.69:::::::* cpe:2.3:a:f5:nginx:0.7.68:::::::* cpe:2.3:a:f5:nginx:0.7.67:::::::* cpe:2.3:a:f5:nginx:0.7.66:::::::* cpe:2.3:a:f5:nginx:0.7.65:::::::* cpe:2.3:a:f5:nginx:0.7.64:::::::* cpe:2.3:a:f5:nginx:0.7.63:::::::* cpe:2.3:a:f5:nginx:0.7.62:::::::* cpe:2.3:a:f5:nginx:0.7.61:::::::* cpe:2.3:a:f5:nginx:0.7.60:::::::* cpe:2.3:a:f5:nginx:0.7.6:::::::* cpe:2.3:a:f5:nginx:0.7.59:::::::* cpe:2.3:a:f5:nginx:0.7.58:::::::* cpe:2.3:a:f5:nginx:0.7.57:::::::* cpe:2.3:a:f5:nginx:0.7.56:::::::* cpe:2.3:a:f5:nginx:0.7.55:::::::* cpe:2.3:a:f5:nginx:0.7.54:::::::* cpe:2.3:a:f5:nginx:0.7.53:::::::* cpe:2.3:a:f5:nginx:0.7.52:::::::* cpe:2.3:a:f5:nginx:0.7.51:::::::* cpe:2.3:a:f5:nginx:0.7.50:::::::* cpe:2.3:a:f5:nginx:0.7.5:::::::* cpe:2.3:a:f5:nginx:0.7.49:::::::* cpe:2.3:a:f5:nginx:0.7.48:::::::* cpe:2.3:a:f5:nginx:0.7.47:::::::* cpe:2.3:a:f5:nginx:0.7.46:::::::* cpe:2.3:a:f5:nginx:0.7.45:::::::* cpe:2.3:a:f5:nginx:0.7.44:::::::* cpe:2.3:a:f5:nginx:0.7.43:::::::* cpe:2.3:a:f5:nginx:0.7.42:::::::* cpe:2.3:a:f5:nginx:0.7.41:::::::* cpe:2.3:a:f5:nginx:0.7.40:::::::* cpe:2.3:a:f5:nginx:0.7.4:::::::* cpe:2.3:a:f5:nginx:0.7.39:::::::* cpe:2.3:a:f5:nginx:0.7.38:::::::* cpe:2.3:a:f5:nginx:0.7.37:::::::* cpe:2.3:a:f5:nginx:0.7.36:::::::* cpe:2.3:a:f5:nginx:0.7.35:::::::* cpe:2.3:a:f5:nginx:0.7.34:::::::* cpe:2.3:a:f5:nginx:0.7.33:::::::* cpe:2.3:a:f5:nginx:0.7.32:::::::* cpe:2.3:a:f5:nginx:0.7.31:::::::* cpe:2.3:a:f5:nginx:0.7.30:::::::* cpe:2.3:a:f5:nginx:0.7.3:::::::* cpe:2.3:a:f5:nginx:0.7.29:::::::* cpe:2.3:a:f5:nginx:0.7.28:::::::* cpe:2.3:a:f5:nginx:0.7.27:::::::* cpe:2.3:a:f5:nginx:0.7.26:::::::* cpe:2.3:a:f5:nginx:0.7.25:::::::* cpe:2.3:a:f5:nginx:0.7.24:::::::* cpe:2.3:a:f5:nginx:0.7.23:::::::* cpe:2.3:a:f5:nginx:0.7.22:::::::* cpe:2.3:a:f5:nginx:0.7.21:::::::* cpe:2.3:a:f5:nginx:0.7.20:::::::* cpe:2.3:a:f5:nginx:0.7.2:::::::* cpe:2.3:a:f5:nginx:0.7.19:::::::* cpe:2.3:a:f5:nginx:0.7.18:::::::* cpe:2.3:a:f5:nginx:0.7.17:::::::* cpe:2.3:a:f5:nginx:0.7.16:::::::* cpe:2.3:a:f5:nginx:0.7.15:::::::* cpe:2.3:a:f5:nginx:0.7.14:::::::* cpe:2.3:a:f5:nginx:0.7.13:::::::* cpe:2.3:a:f5:nginx:0.7.12:::::::* cpe:2.3:a:f5:nginx:0.7.11:::::::* cpe:2.3:a:f5:nginx:0.7.10:::::::* cpe:2.3:a:f5:nginx:0.7.1:::::::* cpe:2.3:a:f5:nginx:0.7.0:::::::* cpe:2.3:a:f5:nginx:0.6.9:::::::* cpe:2.3:a:f5:nginx:0.6.8:::::::* cpe:2.3:a:f5:nginx:0.6.7:::::::* cpe:2.3:a:f5:nginx:0.6.6:::::::* cpe:2.3:a:f5:nginx:0.6.5:::::::* cpe:2.3:a:f5:nginx:0.6.4:::::::* cpe:2.3:a:f5:nginx:0.6.39:::::::* cpe:2.3:a:f5:nginx:0.6.38:::::::* cpe:2.3:a:f5:nginx:0.6.37:::::::* cpe:2.3:a:f5:nginx:0.6.36:::::::* cpe:2.3:a:f5:nginx:0.6.35:::::::* cpe:2.3:a:f5:nginx:0.6.34:::::::* cpe:2.3:a:f5:nginx:0.6.33:::::::* cpe:2.3:a:f5:nginx:0.6.32:::::::* cpe:2.3:a:f5:nginx:0.6.31:::::::* cpe:2.3:a:f5:nginx:0.6.30:::::::* cpe:2.3:a:f5:nginx:0.6.3:::::::* cpe:2.3:a:f5:nginx:0.6.29:::::::* cpe:2.3:a:f5:nginx:0.6.28:::::::* cpe:2.3:a:f5:nginx:0.6.27:::::::* cpe:2.3:a:f5:nginx:0.6.26:::::::* cpe:2.3:a:f5:nginx:0.6.25:::::::* cpe:2.3:a:f5:nginx:0.6.24:::::::* cpe:2.3:a:f5:nginx:0.6.23:::::::* cpe:2.3:a:f5:nginx:0.6.22:::::::* cpe:2.3:a:f5:nginx:0.6.21:::::::* cpe:2.3:a:f5:nginx:0.6.20:::::::* cpe:2.3:a:f5:nginx:0.6.2:::::::* cpe:2.3:a:f5:nginx:0.6.19:::::::* cpe:2.3:a:f5:nginx:0.6.18:::::::* cpe:2.3:a:f5:nginx:0.6.17:::::::* cpe:2.3:a:f5:nginx:0.6.16:::::::* cpe:2.3:a:f5:nginx:0.6.15:::::::* cpe:2.3:a:f5:nginx:0.6.14:::::::* cpe:2.3:a:f5:nginx:0.6.13:::::::* cpe:2.3:a:f5:nginx:0.6.12:::::::* cpe:2.3:a:f5:nginx:0.6.11:::::::* cpe:2.3:a:f5:nginx:0.6.10:::::::* cpe:2.3:a:f5:nginx:0.6.1:::::::* cpe:2.3:a:f5:nginx:0.6.0:::::::* cpe:2.3:a:f5:nginx:0.5.9:::::::* cpe:2.3:a:f5:nginx:0.5.8:::::::* cpe:2.3:a:f5:nginx:0.5.7:::::::* cpe:2.3:a:f5:nginx:0.5.6:::::::* cpe:2.3:a:f5:nginx:0.5.5:::::::* cpe:2.3:a:f5:nginx:0.5.4:::::::* cpe:2.3:a:f5:nginx:0.5.38:::::::* cpe:2.3:a:f5:nginx:0.5.37:::::::* cpe:2.3:a:f5:nginx:0.5.36:::::::* cpe:2.3:a:f5:nginx:0.5.35:::::::* cpe:2.3:a:f5:nginx:0.5.34:::::::* cpe:2.3:a:f5:nginx:0.5.33:::::::* cpe:2.3:a:f5:nginx:0.5.32:::::::* cpe:2.3:a:f5:nginx:0.5.31:::::::* cpe:2.3:a:f5:nginx:0.5.30:::::::* cpe:2.3:a:f5:nginx:0.5.3:::::::* cpe:2.3:a:f5:nginx:0.5.29:::::::* cpe:2.3:a:f5:nginx:0.5.28:::::::* cpe:2.3:a:f5:nginx:0.5.27:::::::* cpe:2.3:a:f5:nginx:0.5.26:::::::* cpe:2.3:a:f5:nginx:0.5.25:::::::* cpe:2.3:a:f5:nginx:0.5.24:::::::* cpe:2.3:a:f5:nginx:0.5.23:::::::* cpe:2.3:a:f5:nginx:0.5.22:::::::* cpe:2.3:a:f5:nginx:0.5.21:::::::* cpe:2.3:a:f5:nginx:0.5.20:::::::* cpe:2.3:a:f5:nginx:0.5.2:::::::* cpe:2.3:a:f5:nginx:0.5.19:::::::* cpe:2.3:a:f5:nginx:0.5.18:::::::* cpe:2.3:a:f5:nginx:0.5.17:::::::* cpe:2.3:a:f5:nginx:0.5.16:::::::* cpe:2.3:a:f5:nginx:0.5.15:::::::* cpe:2.3:a:f5:nginx:0.5.14:::::::* cpe:2.3:a:f5:nginx:0.5.13:::::::* cpe:2.3:a:f5:nginx:0.5.12:::::::* cpe:2.3:a:f5:nginx:0.5.11:::::::* cpe:2.3:a:f5:nginx:0.5.10:::::::* cpe:2.3:a:f5:nginx:0.5.1:::::::* cpe:2.3:a:f5:nginx:0.5.0:::::::* cpe:2.3:a:f5:nginx:0.4.9:::::::* cpe:2.3:a:f5:nginx:0.4.8:::::::* cpe:2.3:a:f5:nginx:0.4.7:::::::* cpe:2.3:a:f5:nginx:0.4.6:::::::* cpe:2.3:a:f5:nginx:0.4.5:::::::* cpe:2.3:a:f5:nginx:0.4.4:::::::* cpe:2.3:a:f5:nginx:0.4.3:::::::* cpe:2.3:a:f5:nginx:0.4.2:::::::* cpe:2.3:a:f5:nginx:0.4.14:::::::* cpe:2.3:a:f5:nginx:0.4.13:::::::* cpe:2.3:a:f5:nginx:0.4.12:::::::* cpe:2.3:a:f5:nginx:0.4.11:::::::* cpe:2.3:a:f5:nginx:0.4.10:::::::* cpe:2.3:a:f5:nginx:0.4.1:::::::* cpe:2.3:a:f5:nginx:0.4.0:::::::* cpe:2.3:a:f5:nginx:0.3.9:::::::* cpe:2.3:a:f5:nginx:0.3.8:::::::* cpe:2.3:a:f5:nginx:0.3.7:::::::* cpe:2.3:a:f5:nginx:0.3.61:::::::* cpe:2.3:a:f5:nginx:0.3.60:::::::* cpe:2.3:a:f5:nginx:0.3.6:::::::* cpe:2.3:a:f5:nginx:0.3.59:::::::* cpe:2.3:a:f5:nginx:0.3.58:::::::* cpe:2.3:a:f5:nginx:0.3.57:::::::* cpe:2.3:a:f5:nginx:0.3.56:::::::* cpe:2.3:a:f5:nginx:0.3.55:::::::* cpe:2.3:a:f5:nginx:0.3.54:::::::* cpe:2.3:a:f5:nginx:0.3.53:::::::* cpe:2.3:a:f5:nginx:0.3.52:::::::* cpe:2.3:a:f5:nginx:0.3.51:::::::* cpe:2.3:a:f5:nginx:0.3.50:::::::* cpe:2.3:a:f5:nginx:0.3.5:::::::* cpe:2.3:a:f5:nginx:0.3.49:::::::* cpe:2.3:a:f5:nginx:0.3.48:::::::* cpe:2.3:a:f5:nginx:0.3.47:::::::* cpe:2.3:a:f5:nginx:0.3.46:::::::* cpe:2.3:a:f5:nginx:0.3.45:::::::* cpe:2.3:a:f5:nginx:0.3.44:::::::* cpe:2.3:a:f5:nginx:0.3.43:::::::* cpe:2.3:a:f5:nginx:0.3.42:::::::* cpe:2.3:a:f5:nginx:0.3.41:::::::* cpe:2.3:a:f5:nginx:0.3.40:::::::* cpe:2.3:a:f5:nginx:0.3.4:::::::* cpe:2.3:a:f5:nginx:0.3.39:::::::* cpe:2.3:a:f5:nginx:0.3.38:::::::* cpe:2.3:a:f5:nginx:0.3.37:::::::* cpe:2.3:a:f5:nginx:0.3.36:::::::* cpe:2.3:a:f5:nginx:0.3.35:::::::* cpe:2.3:a:f5:nginx:0.3.34:::::::* cpe:2.3:a:f5:nginx:0.3.33:::::::* cpe:2.3:a:f5:nginx:0.3.32:::::::* cpe:2.3:a:f5:nginx:0.3.31:::::::* cpe:2.3:a:f5:nginx:0.3.30:::::::* cpe:2.3:a:f5:nginx:0.3.3:::::::* cpe:2.3:a:f5:nginx:0.3.29:::::::* cpe:2.3:a:f5:nginx:0.3.28:::::::* cpe:2.3:a:f5:nginx:0.3.27:::::::* cpe:2.3:a:f5:nginx:0.3.26:::::::* cpe:2.3:a:f5:nginx:0.3.25:::::::* cpe:2.3:a:f5:nginx:0.3.24:::::::* cpe:2.3:a:f5:nginx:0.3.23:::::::* cpe:2.3:a:f5:nginx:0.3.22:::::::* cpe:2.3:a:f5:nginx:0.3.21:::::::* cpe:2.3:a:f5:nginx:0.3.20:::::::* cpe:2.3:a:f5:nginx:0.3.2:::::::* cpe:2.3:a:f5:nginx:0.3.19:::::::* cpe:2.3:a:f5:nginx:0.3.18:::::::* cpe:2.3:a:f5:nginx:0.3.17:::::::* cpe:2.3:a:f5:nginx:0.3.16:::::::* cpe:2.3:a:f5:nginx:0.3.15:::::::* cpe:2.3:a:f5:nginx:0.3.14:::::::* cpe:2.3:a:f5:nginx:0.3.13:::::::* cpe:2.3:a:f5:nginx:0.3.12:::::::* cpe:2.3:a:f5:nginx:0.3.11:::::::* cpe:2.3:a:f5:nginx:0.3.10:::::::* cpe:2.3:a:f5:nginx:0.3.1:::::::* cpe:2.3:a:f5:nginx:0.3.0:::::::* cpe:2.3:a:f5:nginx:0.2.6:::::::* cpe:2.3:a:f5:nginx:0.2.5:::::::* cpe:2.3:a:f5:nginx:0.2.4:::::::* cpe:2.3:a:f5:nginx:0.2.3:::::::* cpe:2.3:a:f5:nginx:0.2.2:::::::* cpe:2.3:a:f5:nginx:0.2.1:::::::* cpe:2.3:a:f5:nginx:0.2.0:::::::* cpe:2.3:a:f5:nginx:0.1.9:::::::* cpe:2.3:a:f5:nginx:0.1.8:::::::* cpe:2.3:a:f5:nginx:0.1.7:::::::* cpe:2.3:a:f5:nginx:0.1.6:::::::* cpe:2.3:a:f5:nginx:0.1.5:::::::* cpe:2.3:a:f5:nginx:0.1.45:::::::* cpe:2.3:a:f5:nginx:0.1.44:::::::* cpe:2.3:a:f5:nginx:0.1.43:::::::* cpe:2.3:a:f5:nginx:0.1.42:::::::* cpe:2.3:a:f5:nginx:0.1.41:::::::* cpe:2.3:a:f5:nginx:0.1.40:::::::* cpe:2.3:a:f5:nginx:0.1.4:::::::* cpe:2.3:a:f5:nginx:0.1.39:::::::* cpe:2.3:a:f5:nginx:0.1.38:::::::* cpe:2.3:a:f5:nginx:0.1.37:::::::* cpe:2.3:a:f5:nginx:0.1.36:::::::* cpe:2.3:a:f5:nginx:0.1.35:::::::* cpe:2.3:a:f5:nginx:0.1.34:::::::* cpe:2.3:a:f5:nginx:0.1.33:::::::* cpe:2.3:a:f5:nginx:0.1.32:::::::* cpe:2.3:a:f5:nginx:0.1.31:::::::* cpe:2.3:a:f5:nginx:0.1.30:::::::* cpe:2.3:a:f5:nginx:0.1.3:::::::* cpe:2.3:a:f5:nginx:0.1.29:::::::* cpe:2.3:a:f5:nginx:0.1.28:::::::* cpe:2.3:a:f5:nginx:0.1.27:::::::* cpe:2.3:a:f5:nginx:0.1.26:::::::* cpe:2.3:a:f5:nginx:0.1.25:::::::* cpe:2.3:a:f5:nginx:0.1.24:::::::* cpe:2.3:a:f5:nginx:0.1.23:::::::* cpe:2.3:a:f5:nginx:0.1.22:::::::* cpe:2.3:a:f5:nginx:0.1.21:::::::* cpe:2.3:a:f5:nginx:0.1.20:::::::* cpe:2.3:a:f5:nginx:0.1.2:::::::* cpe:2.3:a:f5:nginx:0.1.19:::::::* cpe:2.3:a:f5:nginx:0.1.18:::::::* cpe:2.3:a:f5:nginx:0.1.17:::::::* cpe:2.3:a:f5:nginx:0.1.16:::::::* cpe:2.3:a:f5:nginx:0.1.15:::::::* cpe:2.3:a:f5:nginx:0.1.14:::::::* cpe:2.3:a:f5:nginx:0.1.13:::::::* cpe:2.3:a:f5:nginx:0.1.12:::::::* cpe:2.3:a:f5:nginx:0.1.11:::::::* cpe:2.3:a:f5:nginx:0.1.10:::::::* cpe:2.3:a:f5:nginx:0.1.1:::::::* cpe:2.3:a:f5:nginx:0.1.0:::::::* cpe:2.3:a:f5:nginx:r2::::open_source_subscription::: cpe:2.3:a:f5:nginx:r1::::open_source_subscription::: cpe:2.3:a:f5:nginx::::::::	305
Application	Gnu Gnutls cpe:2.3:a:gnu:gnutls:2.8.5:::::::* cpe:2.3:a:gnu:gnutls:2.8.4:::::::* cpe:2.3:a:gnu:gnutls:2.8.3:::::::* cpe:2.3:a:gnu:gnutls:2.8.2:::::::* cpe:2.3:a:gnu:gnutls:2.8.1:::::::* cpe:2.3:a:gnu:gnutls:2.8.0:::::::* cpe:2.3:a:gnu:gnutls:2.7.4:::::::* cpe:2.3:a:gnu:gnutls:2.7.3:::::::* cpe:2.3:a:gnu:gnutls:2.7.2:::::::* cpe:2.3:a:gnu:gnutls:2.7.1:::::::* cpe:2.3:a:gnu:gnutls:2.7.0:::::::* cpe:2.3:a:gnu:gnutls:2.6.6:::::::* cpe:2.3:a:gnu:gnutls:2.6.5:::::::* cpe:2.3:a:gnu:gnutls:2.6.4:::::::* cpe:2.3:a:gnu:gnutls:2.6.3:::::::* cpe:2.3:a:gnu:gnutls:2.6.2:::::::* cpe:2.3:a:gnu:gnutls:2.6.1:::::::* cpe:2.3:a:gnu:gnutls:2.6.0:::::::* cpe:2.3:a:gnu:gnutls:2.5.0:::::::* cpe:2.3:a:gnu:gnutls:2.4.3:::::::* cpe:2.3:a:gnu:gnutls:2.4.2:::::::* cpe:2.3:a:gnu:gnutls:2.4.1:::::::* cpe:2.3:a:gnu:gnutls:2.4.0:::::::* cpe:2.3:a:gnu:gnutls:2.3.9:::::::* cpe:2.3:a:gnu:gnutls:2.3.8:::::::* cpe:2.3:a:gnu:gnutls:2.3.7:::::::* cpe:2.3:a:gnu:gnutls:2.3.6:::::::* cpe:2.3:a:gnu:gnutls:2.3.5:::::::* cpe:2.3:a:gnu:gnutls:2.3.4:::::::* cpe:2.3:a:gnu:gnutls:2.3.3:::::::* cpe:2.3:a:gnu:gnutls:2.3.2:::::::* cpe:2.3:a:gnu:gnutls:2.3.11:::::::* cpe:2.3:a:gnu:gnutls:2.3.10:::::::* cpe:2.3:a:gnu:gnutls:2.3.1:::::::* cpe:2.3:a:gnu:gnutls:2.3.0:::::::* cpe:2.3:a:gnu:gnutls:2.2.5:::::::* cpe:2.3:a:gnu:gnutls:2.2.4:::::::* cpe:2.3:a:gnu:gnutls:2.2.3:::::::* cpe:2.3:a:gnu:gnutls:2.2.2:::::::* cpe:2.3:a:gnu:gnutls:2.2.1:::::::* cpe:2.3:a:gnu:gnutls:2.2.0:::::::* cpe:2.3:a:gnu:gnutls:2.1.8:::::::* cpe:2.3:a:gnu:gnutls:2.1.7:::::::* cpe:2.3:a:gnu:gnutls:2.1.6:::::::* cpe:2.3:a:gnu:gnutls:2.1.5:::::::* cpe:2.3:a:gnu:gnutls:2.1.4:::::::* cpe:2.3:a:gnu:gnutls:2.1.3:::::::* cpe:2.3:a:gnu:gnutls:2.1.2:::::::* cpe:2.3:a:gnu:gnutls:2.1.1:::::::* cpe:2.3:a:gnu:gnutls:2.1.0:::::::* cpe:2.3:a:gnu:gnutls:2.0.4:::::::* cpe:2.3:a:gnu:gnutls:2.0.3:::::::* cpe:2.3:a:gnu:gnutls:2.0.2:::::::* cpe:2.3:a:gnu:gnutls:2.0.1:::::::* cpe:2.3:a:gnu:gnutls:2.0.0:::::::* cpe:2.3:a:gnu:gnutls:1.7.9:::::::* cpe:2.3:a:gnu:gnutls:1.7.8:::::::* cpe:2.3:a:gnu:gnutls:1.7.7:::::::* cpe:2.3:a:gnu:gnutls:1.7.6:::::::* cpe:2.3:a:gnu:gnutls:1.7.5:::::::* cpe:2.3:a:gnu:gnutls:1.7.4:::::::* cpe:2.3:a:gnu:gnutls:1.7.3:::::::* cpe:2.3:a:gnu:gnutls:1.7.2:::::::* cpe:2.3:a:gnu:gnutls:1.7.19:::::::* cpe:2.3:a:gnu:gnutls:1.7.18:::::::* cpe:2.3:a:gnu:gnutls:1.7.17:::::::* cpe:2.3:a:gnu:gnutls:1.7.16:::::::* cpe:2.3:a:gnu:gnutls:1.7.15:::::::* cpe:2.3:a:gnu:gnutls:1.7.14:::::::* cpe:2.3:a:gnu:gnutls:1.7.13:::::::* cpe:2.3:a:gnu:gnutls:1.7.12:::::::* cpe:2.3:a:gnu:gnutls:1.7.11:::::::* cpe:2.3:a:gnu:gnutls:1.7.10:::::::* cpe:2.3:a:gnu:gnutls:1.7.1:::::::* cpe:2.3:a:gnu:gnutls:1.7.0:::::::* cpe:2.3:a:gnu:gnutls:1.6.3:::::::* cpe:2.3:a:gnu:gnutls:1.6.2:::::::* cpe:2.3:a:gnu:gnutls:1.6.1:::::::* cpe:2.3:a:gnu:gnutls:1.6.0:::::::* cpe:2.3:a:gnu:gnutls:1.5.5:::::::* cpe:2.3:a:gnu:gnutls:1.5.4:::::::* cpe:2.3:a:gnu:gnutls:1.5.3:::::::* cpe:2.3:a:gnu:gnutls:1.5.2:::::::* cpe:2.3:a:gnu:gnutls:1.5.1:::::::* cpe:2.3:a:gnu:gnutls:1.5.0:::::::* cpe:2.3:a:gnu:gnutls:1.4.5:::::::* cpe:2.3:a:gnu:gnutls:1.4.4:::::::* cpe:2.3:a:gnu:gnutls:1.4.3:::::::* cpe:2.3:a:gnu:gnutls:1.4.2:::::::* cpe:2.3:a:gnu:gnutls:1.4.1:::::::* cpe:2.3:a:gnu:gnutls:1.4.0:::::::* cpe:2.3:a:gnu:gnutls:1.3.5:::::::* cpe:2.3:a:gnu:gnutls:1.3.4:::::::* cpe:2.3:a:gnu:gnutls:1.3.3:::::::* cpe:2.3:a:gnu:gnutls:1.3.2:::::::* cpe:2.3:a:gnu:gnutls:1.3.1:::::::* cpe:2.3:a:gnu:gnutls:1.3.0:::::::* cpe:2.3:a:gnu:gnutls:1.2.9:::::::* cpe:2.3:a:gnu:gnutls:1.2.8.1a1:::::::* cpe:2.3:a:gnu:gnutls:1.2.8:::::::* cpe:2.3:a:gnu:gnutls:1.2.7:::::::* cpe:2.3:a:gnu:gnutls:1.2.6:::::::* cpe:2.3:a:gnu:gnutls:1.2.5:::::::* cpe:2.3:a:gnu:gnutls:1.2.4:::::::* cpe:2.3:a:gnu:gnutls:1.2.3:::::::* cpe:2.3:a:gnu:gnutls:1.2.2:::::::* cpe:2.3:a:gnu:gnutls:1.2.11:::::::* cpe:2.3:a:gnu:gnutls:1.2.10:::::::* cpe:2.3:a:gnu:gnutls:1.2.1:::::::* cpe:2.3:a:gnu:gnutls:1.2.0:::::::* cpe:2.3:a:gnu:gnutls:1.1.23:::::::* cpe:2.3:a:gnu:gnutls:1.1.22:::::::* cpe:2.3:a:gnu:gnutls:1.1.21:::::::* cpe:2.3:a:gnu:gnutls:1.1.20:::::::* cpe:2.3:a:gnu:gnutls:1.1.19:::::::* cpe:2.3:a:gnu:gnutls:1.1.18:::::::* cpe:2.3:a:gnu:gnutls:1.1.17:::::::* cpe:2.3:a:gnu:gnutls:1.1.16:::::::* cpe:2.3:a:gnu:gnutls:1.1.15:::::::* cpe:2.3:a:gnu:gnutls:1.1.14:::::::* cpe:2.3:a:gnu:gnutls:1.1.13:::::::* cpe:2.3:a:gnu:gnutls:1.0.25:::::::* cpe:2.3:a:gnu:gnutls:1.0.24:::::::* cpe:2.3:a:gnu:gnutls:1.0.23:::::::* cpe:2.3:a:gnu:gnutls:1.0.22:::::::* cpe:2.3:a:gnu:gnutls:1.0.21:::::::* cpe:2.3:a:gnu:gnutls:1.0.20:::::::* cpe:2.3:a:gnu:gnutls:1.0.19:::::::* cpe:2.3:a:gnu:gnutls:1.0.18:::::::* cpe:2.3:a:gnu:gnutls:1.0.17:::::::* cpe:2.3:a:gnu:gnutls:1.0.16:::::::* cpe:2.3:a:gnu:gnutls::::::::	132
Application	Mozilla Network Security Services cpe:2.3:a:mozilla:network_security_services:3.9.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.6.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.3.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.2.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.12:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.11:::::::* cpe:2.3:a:mozilla:network_security_services:3.10.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.10.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.1.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.1:::::::* cpe:2.3:a:mozilla:network_security_services:::::::: cpe:2.3:a:mozilla:network_security_services:-:::::::*	46
Application	Mozilla Nss cpe:2.3:a:mozilla:nss:3.9.5:::::::* cpe:2.3:a:mozilla:nss:3.9:::::::* cpe:2.3:a:mozilla:nss:3.8:::::::* cpe:2.3:a:mozilla:nss:3.7.7:::::::* cpe:2.3:a:mozilla:nss:3.7.5:::::::* cpe:2.3:a:mozilla:nss:3.7.3:::::::* cpe:2.3:a:mozilla:nss:3.7.2:::::::* cpe:2.3:a:mozilla:nss:3.7.1:::::::* cpe:2.3:a:mozilla:nss:3.7:::::::* cpe:2.3:a:mozilla:nss:3.6.1:::::::* cpe:2.3:a:mozilla:nss:3.6:::::::* cpe:2.3:a:mozilla:nss:3.5:::::::* cpe:2.3:a:mozilla:nss:3.4.3:::::::* cpe:2.3:a:mozilla:nss:3.4.2:::::::* cpe:2.3:a:mozilla:nss:3.4.1:::::::* cpe:2.3:a:mozilla:nss:3.4:::::::* cpe:2.3:a:mozilla:nss:3.3.2:::::::* cpe:2.3:a:mozilla:nss:3.3.1:::::::* cpe:2.3:a:mozilla:nss:3.3:::::::* cpe:2.3:a:mozilla:nss:3.2.1:::::::* cpe:2.3:a:mozilla:nss:3.2:::::::* cpe:2.3:a:mozilla:nss:3.12.4:::::::* cpe:2.3:a:mozilla:nss:3.12.2:::::::* cpe:2.3:a:mozilla:nss:3.12.1:::::::* cpe:2.3:a:mozilla:nss:3.12:::::::* cpe:2.3:a:mozilla:nss:3.11.8:::::::* cpe:2.3:a:mozilla:nss:3.11.7:::::::* cpe:2.3:a:mozilla:nss:3.11.4:::::::* cpe:2.3:a:mozilla:nss:3.11.2:::::::* cpe:2.3:a:mozilla:nss:3.10:::::::* cpe:2.3:a:mozilla:nss:3.0:::::::* cpe:2.3:a:mozilla:nss::::::::	32
Application	Openldap cpe:2.3:a:openldap:openldap:2.4.9:::::::* cpe:2.3:a:openldap:openldap:2.4.8:::::::* cpe:2.3:a:openldap:openldap:2.4.7:::::::* cpe:2.3:a:openldap:openldap:2.4.6:::::::* cpe:2.3:a:openldap:openldap:2.4.3:::::::* cpe:2.3:a:openldap:openldap:2.4.17:::::::* cpe:2.3:a:openldap:openldap:2.4.16:::::::* cpe:2.3:a:openldap:openldap:2.4.15:::::::* cpe:2.3:a:openldap:openldap:2.4.14:::::::* cpe:2.3:a:openldap:openldap:2.4.13:::::::* cpe:2.3:a:openldap:openldap:2.4.12:::::::* cpe:2.3:a:openldap:openldap:2.4.11:::::::* cpe:2.3:a:openldap:openldap:2.4.10:::::::* cpe:2.3:a:openldap:openldap:2.4:::::::* cpe:2.3:a:openldap:openldap:2.3.9:::::::* cpe:2.3:a:openldap:openldap:2.3.8:::::::* cpe:2.3:a:openldap:openldap:2.3.7:::::::* cpe:2.3:a:openldap:openldap:2.3.6:::::::* cpe:2.3:a:openldap:openldap:2.3.5:::::::* cpe:2.3:a:openldap:openldap:2.3.43:::::::* cpe:2.3:a:openldap:openldap:2.3.42:::::::* cpe:2.3:a:openldap:openldap:2.3.41:::::::* cpe:2.3:a:openldap:openldap:2.3.40:::::::* cpe:2.3:a:openldap:openldap:2.3.4:::::::* cpe:2.3:a:openldap:openldap:2.3.39:::::::* cpe:2.3:a:openldap:openldap:2.3.38:::::::* cpe:2.3:a:openldap:openldap:2.3.37:::::::* cpe:2.3:a:openldap:openldap:2.3.36:::::::* cpe:2.3:a:openldap:openldap:2.3.35:::::::* cpe:2.3:a:openldap:openldap:2.3.34:::::::* cpe:2.3:a:openldap:openldap:2.3.33:::::::* cpe:2.3:a:openldap:openldap:2.3.32:::::::* cpe:2.3:a:openldap:openldap:2.3.31:::::::* cpe:2.3:a:openldap:openldap:2.3.30:::::::* cpe:2.3:a:openldap:openldap:2.3.29:::::::* cpe:2.3:a:openldap:openldap:2.3.28_e1.0.0:::::::* cpe:2.3:a:openldap:openldap:2.3.28_20061022:::::::* cpe:2.3:a:openldap:openldap:2.3.28_2006-10-22:::::::* cpe:2.3:a:openldap:openldap:2.3.28_2.20061022:::::::* cpe:2.3:a:openldap:openldap:2.3.28_2_2006-10-22:::::::* cpe:2.3:a:openldap:openldap:2.3.28:::::::* cpe:2.3:a:openldap:openldap:2.3.27_2.20061018:::::::* cpe:2.3:a:openldap:openldap:2.3.27_2_2006-10-18:::::::* cpe:2.3:a:openldap:openldap:2.3.27:::::::* cpe:2.3:a:openldap:openldap:2.3.26:::::::* cpe:2.3:a:openldap:openldap:2.3.25:::::::* cpe:2.3:a:openldap:openldap:2.3.24:::::::* cpe:2.3:a:openldap:openldap:2.3.23:::::::* cpe:2.3:a:openldap:openldap:2.3.22:::::::* cpe:2.3:a:openldap:openldap:2.3.21:::::::* cpe:2.3:a:openldap:openldap:2.3.20:::::::* cpe:2.3:a:openldap:openldap:2.3.19:::::::* cpe:2.3:a:openldap:openldap:2.3.18:::::::* cpe:2.3:a:openldap:openldap:2.3.17:::::::* cpe:2.3:a:openldap:openldap:2.3.16:::::::* cpe:2.3:a:openldap:openldap:2.3.15:::::::* cpe:2.3:a:openldap:openldap:2.3.14:::::::* cpe:2.3:a:openldap:openldap:2.3.13:::::::* cpe:2.3:a:openldap:openldap:2.3.12:::::::* cpe:2.3:a:openldap:openldap:2.3.11:::::::* cpe:2.3:a:openldap:openldap:2.3.10:::::::* cpe:2.3:a:openldap:openldap:2.2.9:::::::* cpe:2.3:a:openldap:openldap:2.2.8:::::::* cpe:2.3:a:openldap:openldap:2.2.7:::::::* cpe:2.3:a:openldap:openldap:2.2.6:::::::* cpe:2.3:a:openldap:openldap:2.2.5:::::::* cpe:2.3:a:openldap:openldap:2.2.4:::::::* cpe:2.3:a:openldap:openldap:2.2.29_rev_1.134:::::::* cpe:2.3:a:openldap:openldap:2.2.28_r2:::::::* cpe:2.3:a:openldap:openldap:2.2.27:::::::* cpe:2.3:a:openldap:openldap:2.2.26:::::::* cpe:2.3:a:openldap:openldap:2.2.25:::::::* cpe:2.3:a:openldap:openldap:2.2.24:::::::* cpe:2.3:a:openldap:openldap:2.2.23:::::::* cpe:2.3:a:openldap:openldap:2.2.22:::::::* cpe:2.3:a:openldap:openldap:2.2.21:::::::* cpe:2.3:a:openldap:openldap:2.2.20:::::::* cpe:2.3:a:openldap:openldap:2.2.19:::::::* cpe:2.3:a:openldap:openldap:2.2.18:::::::* cpe:2.3:a:openldap:openldap:2.2.17:::::::* cpe:2.3:a:openldap:openldap:2.2.16:::::::* cpe:2.3:a:openldap:openldap:2.2.15:::::::* cpe:2.3:a:openldap:openldap:2.2.14:::::::* cpe:2.3:a:openldap:openldap:2.2.13:::::::* cpe:2.3:a:openldap:openldap:2.2.12:::::::* cpe:2.3:a:openldap:openldap:2.2.11:::::::* cpe:2.3:a:openldap:openldap:2.2.10:::::::* cpe:2.3:a:openldap:openldap:2.2.1:::::::* cpe:2.3:a:openldap:openldap:2.2.0:::::::* cpe:2.3:a:openldap:openldap:2.1.9:::::::* cpe:2.3:a:openldap:openldap:2.1.8:::::::* cpe:2.3:a:openldap:openldap:2.1.7:::::::* cpe:2.3:a:openldap:openldap:2.1.6:::::::* cpe:2.3:a:openldap:openldap:2.1.5:::::::* cpe:2.3:a:openldap:openldap:2.1.4:::::::* cpe:2.3:a:openldap:openldap:2.1.30:::::::* cpe:2.3:a:openldap:openldap:2.1.3:::::::* cpe:2.3:a:openldap:openldap:2.1.29:::::::* cpe:2.3:a:openldap:openldap:2.1.28:::::::* cpe:2.3:a:openldap:openldap:2.1.27:::::::* cpe:2.3:a:openldap:openldap:2.1.26:::::::* cpe:2.3:a:openldap:openldap:2.1.25:::::::* cpe:2.3:a:openldap:openldap:2.1.24:::::::* cpe:2.3:a:openldap:openldap:2.1.23:::::::* cpe:2.3:a:openldap:openldap:2.1.22:::::::* cpe:2.3:a:openldap:openldap:2.1.21:::::::* cpe:2.3:a:openldap:openldap:2.1.20:::::::* cpe:2.3:a:openldap:openldap:2.1.2:::::::* cpe:2.3:a:openldap:openldap:2.1.19:::::::* cpe:2.3:a:openldap:openldap:2.1.18:::::::* cpe:2.3:a:openldap:openldap:2.1.17:::::::* cpe:2.3:a:openldap:openldap:2.1.16:::::::* cpe:2.3:a:openldap:openldap:2.1.15:::::::* cpe:2.3:a:openldap:openldap:2.1.14:::::::* cpe:2.3:a:openldap:openldap:2.1.13:::::::* cpe:2.3:a:openldap:openldap:2.1.12:::::::* cpe:2.3:a:openldap:openldap:2.1.11:::::::* cpe:2.3:a:openldap:openldap:2.1.10:::::::* cpe:2.3:a:openldap:openldap:2.1_.20:::::::* cpe:2.3:a:openldap:openldap:2.0.9:::::::* cpe:2.3:a:openldap:openldap:2.0.8:::::::* cpe:2.3:a:openldap:openldap:2.0.7:::::::* cpe:2.3:a:openldap:openldap:2.0.6:::::::* cpe:2.3:a:openldap:openldap:2.0.5:::::::* cpe:2.3:a:openldap:openldap:2.0.4:::::::* cpe:2.3:a:openldap:openldap:2.0.3:::::::* cpe:2.3:a:openldap:openldap:2.0.27:::::::* cpe:2.3:a:openldap:openldap:2.0.26:::::::* cpe:2.3:a:openldap:openldap:2.0.25:::::::* cpe:2.3:a:openldap:openldap:2.0.24:::::::* cpe:2.3:a:openldap:openldap:2.0.23:::::::* cpe:2.3:a:openldap:openldap:2.0.22:::::::* cpe:2.3:a:openldap:openldap:2.0.21:::::::* cpe:2.3:a:openldap:openldap:2.0.20:::::::* cpe:2.3:a:openldap:openldap:2.0.2:::::::* cpe:2.3:a:openldap:openldap:2.0.19:::::::* cpe:2.3:a:openldap:openldap:2.0.18:::::::* cpe:2.3:a:openldap:openldap:2.0.17:::::::* cpe:2.3:a:openldap:openldap:2.0.16:::::::* cpe:2.3:a:openldap:openldap:2.0.15:::::::* cpe:2.3:a:openldap:openldap:2.0.14:::::::* cpe:2.3:a:openldap:openldap:2.0.13:::::::* cpe:2.3:a:openldap:openldap:2.0.12:::::::* cpe:2.3:a:openldap:openldap:2.0.11_9:::::::* cpe:2.3:a:openldap:openldap:2.0.11_11s:::::::* cpe:2.3:a:openldap:openldap:2.0.11_11:::::::* cpe:2.3:a:openldap:openldap:2.0.11:::::::* cpe:2.3:a:openldap:openldap:2.0.10:::::::* cpe:2.3:a:openldap:openldap:2.0.1:::::::* cpe:2.3:a:openldap:openldap:2.0.0:::::::* cpe:2.3:a:openldap:openldap:2.0:::::::* cpe:2.3:a:openldap:openldap:1.2.9:::::::* cpe:2.3:a:openldap:openldap:1.2.8:::::::* cpe:2.3:a:openldap:openldap:1.2.7:::::::* cpe:2.3:a:openldap:openldap:1.2.6:::::::* cpe:2.3:a:openldap:openldap:1.2.5:::::::* cpe:2.3:a:openldap:openldap:1.2.4:::::::* cpe:2.3:a:openldap:openldap:1.2.3:::::::* cpe:2.3:a:openldap:openldap:1.2.2:::::::* cpe:2.3:a:openldap:openldap:1.2.13:::::::* cpe:2.3:a:openldap:openldap:1.2.12:::::::* cpe:2.3:a:openldap:openldap:1.2.11:::::::* cpe:2.3:a:openldap:openldap:1.2.10:::::::* cpe:2.3:a:openldap:openldap:1.2.1:::::::* cpe:2.3:a:openldap:openldap:1.2.0:::::::* cpe:2.3:a:openldap:openldap:1.2:::::::* cpe:2.3:a:openldap:openldap:1.1.4:::::::* cpe:2.3:a:openldap:openldap:1.1.3:::::::* cpe:2.3:a:openldap:openldap:1.1.2:::::::* cpe:2.3:a:openldap:openldap:1.1.1:::::::* cpe:2.3:a:openldap:openldap:1.1.0:::::::* cpe:2.3:a:openldap:openldap:1.1:::::::* cpe:2.3:a:openldap:openldap:1.0.3:::::::* cpe:2.3:a:openldap:openldap:1.0.2:::::::* cpe:2.3:a:openldap:openldap:1.0.1:::::::* cpe:2.3:a:openldap:openldap:1.0:::::::* cpe:2.3:a:openldap:openldap:::::::: cpe:2.3:a:openldap:openldap:-:::::::*	178
Application	Openssl cpe:2.3:a:openssl:openssl:1.0::openvms::::: cpe:2.3:a:openssl:openssl:0.9.8zg:::::::* cpe:2.3:a:openssl:openssl:0.9.8zf:::::::* cpe:2.3:a:openssl:openssl:0.9.8ze:::::::* cpe:2.3:a:openssl:openssl:0.9.8zc:::::::* cpe:2.3:a:openssl:openssl:0.9.8zb:::::::* cpe:2.3:a:openssl:openssl:0.9.8za:::::::* cpe:2.3:a:openssl:openssl:0.9.8z:::::::* cpe:2.3:a:openssl:openssl:0.9.8y:::::::* cpe:2.3:a:openssl:openssl:0.9.8x:::::::* cpe:2.3:a:openssl:openssl:0.9.8w:::::::* cpe:2.3:a:openssl:openssl:0.9.8v:::::::* cpe:2.3:a:openssl:openssl:0.9.8u:::::::* cpe:2.3:a:openssl:openssl:0.9.8t:::::::* cpe:2.3:a:openssl:openssl:0.9.8s:::::::* cpe:2.3:a:openssl:openssl:0.9.8r:::::::* cpe:2.3:a:openssl:openssl:0.9.8q:::::::* cpe:2.3:a:openssl:openssl:0.9.8o:::::::* cpe:2.3:a:openssl:openssl:0.9.8n:::::::* cpe:2.3:a:openssl:openssl:0.9.8m:-:::::: cpe:2.3:a:openssl:openssl:0.9.8m:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8l:::::::* cpe:2.3:a:openssl:openssl:0.9.8k:::::::* cpe:2.3:a:openssl:openssl:0.9.8j:::::::* cpe:2.3:a:openssl:openssl:0.9.8i:::::::* cpe:2.3:a:openssl:openssl:0.9.8h:::::::* cpe:2.3:a:openssl:openssl:0.9.8g:::::::* cpe:2.3:a:openssl:openssl:0.9.8g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f:::::::* cpe:2.3:a:openssl:openssl:0.9.8f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f::::::x86: cpe:2.3:a:openssl:openssl:0.9.8e:::::::* cpe:2.3:a:openssl:openssl:0.9.8e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8e::::::x86: cpe:2.3:a:openssl:openssl:0.9.8d:::::::* cpe:2.3:a:openssl:openssl:0.9.8d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8d::::::x86: cpe:2.3:a:openssl:openssl:0.9.8c:::::::* cpe:2.3:a:openssl:openssl:0.9.8c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8c::::::x86: cpe:2.3:a:openssl:openssl:0.9.8b:::::::* cpe:2.3:a:openssl:openssl:0.9.8a:::::::* cpe:2.3:a:openssl:openssl:0.9.8:-:::::: cpe:2.3:a:openssl:openssl:0.9.7m:::::::* cpe:2.3:a:openssl:openssl:0.9.7m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7m::::::x86: cpe:2.3:a:openssl:openssl:0.9.7l:::::::* cpe:2.3:a:openssl:openssl:0.9.7l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7l::::::x86: cpe:2.3:a:openssl:openssl:0.9.7k:::::::* cpe:2.3:a:openssl:openssl:0.9.7k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7k::::::x86: cpe:2.3:a:openssl:openssl:0.9.7j:::::::* cpe:2.3:a:openssl:openssl:0.9.7j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7j::::::x86: cpe:2.3:a:openssl:openssl:0.9.7i:::::::* cpe:2.3:a:openssl:openssl:0.9.7i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7i::::::x86: cpe:2.3:a:openssl:openssl:0.9.7h:::::::* cpe:2.3:a:openssl:openssl:0.9.7h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7h::::::x86: cpe:2.3:a:openssl:openssl:0.9.7g:::::::* cpe:2.3:a:openssl:openssl:0.9.7g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7g::::::x86: cpe:2.3:a:openssl:openssl:0.9.7f:::::::* cpe:2.3:a:openssl:openssl:0.9.7f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7f::::::x86: cpe:2.3:a:openssl:openssl:0.9.7e:::::::* cpe:2.3:a:openssl:openssl:0.9.7e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7e::::::x86: cpe:2.3:a:openssl:openssl:0.9.7d:::::::* cpe:2.3:a:openssl:openssl:0.9.7d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7d::::::x86: cpe:2.3:a:openssl:openssl:0.9.7c:::::::* cpe:2.3:a:openssl:openssl:0.9.7c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7b:::::::* cpe:2.3:a:openssl:openssl:0.9.7b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7b::::::x86: cpe:2.3:a:openssl:openssl:0.9.7a:::::::* cpe:2.3:a:openssl:openssl:0.9.7a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7a::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.7:-:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta6:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6m:::::::* cpe:2.3:a:openssl:openssl:0.9.6m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6m::::::x86: cpe:2.3:a:openssl:openssl:0.9.6l:::::::* cpe:2.3:a:openssl:openssl:0.9.6l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6l::::::x86: cpe:2.3:a:openssl:openssl:0.9.6k:::::::* cpe:2.3:a:openssl:openssl:0.9.6k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6k::::::x86: cpe:2.3:a:openssl:openssl:0.9.6j:::::::* cpe:2.3:a:openssl:openssl:0.9.6j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6j::::::x86: cpe:2.3:a:openssl:openssl:0.9.6i:::::::* cpe:2.3:a:openssl:openssl:0.9.6i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6i::::::x86: cpe:2.3:a:openssl:openssl:0.9.6h:::::::* cpe:2.3:a:openssl:openssl:0.9.6h:bogus:::::: cpe:2.3:a:openssl:openssl:0.9.6h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6h::::::x86: cpe:2.3:a:openssl:openssl:0.9.6g:::::::* cpe:2.3:a:openssl:openssl:0.9.6g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6g::::::x86: cpe:2.3:a:openssl:openssl:0.9.6f:::::::* cpe:2.3:a:openssl:openssl:0.9.6f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6f::::::x86: cpe:2.3:a:openssl:openssl:0.9.6e:::::::* cpe:2.3:a:openssl:openssl:0.9.6e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6e::::::x86: cpe:2.3:a:openssl:openssl:0.9.6d:-:::::: cpe:2.3:a:openssl:openssl:0.9.6d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6d::::::x86: cpe:2.3:a:openssl:openssl:0.9.6c:::::::* cpe:2.3:a:openssl:openssl:0.9.6c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6c::::::x86: cpe:2.3:a:openssl:openssl:0.9.6b:::::::* cpe:2.3:a:openssl:openssl:0.9.6b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6b::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:-:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6a::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:-:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6::::::x86: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5a:-:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a::::::x86: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5:-:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5::::::x86: cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.4:::::::* cpe:2.3:a:openssl:openssl:0.9.4::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.4::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.4::::::x86: cpe:2.3:a:openssl:openssl:0.9.3a:::::::* cpe:2.3:a:openssl:openssl:0.9.3a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3a::::::x86: cpe:2.3:a:openssl:openssl:0.9.3:-:::::: cpe:2.3:a:openssl:openssl:0.9.3::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3::::::x86: cpe:2.3:a:openssl:openssl:0.9.2b:::::::* cpe:2.3:a:openssl:openssl:0.9.2b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.2b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.2b::::::x86: cpe:2.3:a:openssl:openssl:0.9.1c:::::::* cpe:2.3:a:openssl:openssl:0.9.1c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.1c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.1c::::::x86: cpe:2.3:a:openssl:openssl:0.9.1b:::::::* cpe:2.3:a:openssl:openssl:0.9.0b:::::::* cpe:2.3:a:openssl:openssl:::::::: cpe:2.3:a:openssl:openssl:::openvms:::::* cpe:2.3:a:openssl:openssl:-:::::::*	258
Application	Piotr Roszatycki Libnss-Db cpe:2.3:a:piotr_roszatycki:libnss-db:2.2.3:pre1::::::	1
Application	Todd Miller Sudo cpe:2.3:a:todd_miller:sudo:1.7.2p7:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2p6:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2p5:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2p4:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2p3:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2p2:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2p1:::::::* cpe:2.3:a:todd_miller:sudo:1.7.2:::::::* cpe:2.3:a:todd_miller:sudo:1.7.1:::::::* cpe:2.3:a:todd_miller:sudo:1.7.0:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p9:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p8:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p7:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p6:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p5:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p4:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p3:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p22:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p21:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p20:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p19:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p18:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p17:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p16:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p15:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p14:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p13:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p12:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p11:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p10:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.9:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p9:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p8:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p7:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p6:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p5:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p4:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p3:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p12:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p11:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p10:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.8:::::::* cpe:2.3:a:todd_miller:sudo:1.6.7p5:::::::* cpe:2.3:a:todd_miller:sudo:1.6.7p4:::::::* cpe:2.3:a:todd_miller:sudo:1.6.7p3:::::::* cpe:2.3:a:todd_miller:sudo:1.6.7p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.7p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.7:::::::* cpe:2.3:a:todd_miller:sudo:1.6.6:::::::* cpe:2.3:a:todd_miller:sudo:1.6.5p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.5p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.5:::::::* cpe:2.3:a:todd_miller:sudo:1.6.4p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.4p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.4:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p7:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p6:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p5:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p4:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p3:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.3:::::::* cpe:2.3:a:todd_miller:sudo:1.6.2p3:::::::* cpe:2.3:a:todd_miller:sudo:1.6.2p2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.2p1:::::::* cpe:2.3:a:todd_miller:sudo:1.6.2:::::::* cpe:2.3:a:todd_miller:sudo:1.6.1:::::::* cpe:2.3:a:todd_miller:sudo:1.6:::::::* cpe:2.3:a:todd_miller:sudo:1.3.1:::::::*	74
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts:::	6
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::*	5
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::* cpe:2.3:o:fedoraproject:fedora:12:::::::* cpe:2.3:o:fedoraproject:fedora:11:::::::*	4

ExploitDB Exploits

id	Description
2009-12-21	TLS Renegotiation Vulnerability PoC Exploit

OpenVAS Exploits

Date	Description
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-18 (GnuTLS) File : nvt/glsa_201206_18.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2010:0977 centos4 x86_64 File : nvt/gb_CESA-2010_0977_openssl_centos4_x86_64.nasl
2012-04-30	Name : Gentoo Security Advisory GLSA 201203-22 (nginx) File : nvt/glsa_201203_22.nasl
2012-04-16	Name : VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates File : nvt/gb_VMSA-2010-0009.nasl
2012-03-16	Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe... File : nvt/gb_VMSA-2011-0003.nasl
2012-03-12	Name : Gentoo Security Advisory GLSA 201203-02 (cURL) File : nvt/glsa_201203_02.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-01 (openssl) File : nvt/glsa_201110_01.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-05 (gnutls) File : nvt/glsa_201110_05.nasl
2011-08-19	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004) File : nvt/secpod_macosx_su11-004.nasl
2011-08-09	Name : CentOS Update for seamonkey CESA-2009:1432 centos3 i386 File : nvt/gb_CESA-2009_1432_seamonkey_centos3_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1579 centos3 i386 File : nvt/gb_CESA-2009_1579_httpd_centos3_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1579 centos5 i386 File : nvt/gb_CESA-2009_1579_httpd_centos5_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1580 centos4 i386 File : nvt/gb_CESA-2009_1580_httpd_centos4_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2009:1584 centos5 i386 File : nvt/gb_CESA-2009_1584_java_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0054 centos5 i386 File : nvt/gb_CESA-2010_0054_openssl_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0162 centos5 i386 File : nvt/gb_CESA-2010_0162_openssl_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl097a CESA-2010:0164 centos5 i386 File : nvt/gb_CESA-2010_0164_openssl097a_centos5_i386.nasl
2011-08-09	Name : CentOS Update for nspr CESA-2010:0165 centos5 i386 File : nvt/gb_CESA-2010_0165_nspr_centos5_i386.nasl
2011-08-09	Name : CentOS Update for gnutls CESA-2010:0166 centos5 i386 File : nvt/gb_CESA-2010_0166_gnutls_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0339 centos5 i386 File : nvt/gb_CESA-2010_0339_java_centos5_i386.nasl
2011-08-09	Name : CentOS Update for nss_db CESA-2010:0347 centos5 i386 File : nvt/gb_CESA-2010_0347_nss_db_centos5_i386.nasl
2011-08-09	Name : CentOS Update for sudo CESA-2010:0475 centos5 i386 File : nvt/gb_CESA-2010_0475_sudo_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0768 centos5 i386 File : nvt/gb_CESA-2010_0768_java_centos5_i386.nasl
2011-06-24	Name : Ubuntu Update for curl USN-1158-1 File : nvt/gb_ubuntu_USN_1158_1.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201006-18 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_201006_18.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201009-03 (sudo) File : nvt/glsa_201009_03.nasl
2011-03-07	Name : Debian Security Advisory DSA 2161-2 (openjdk-6) File : nvt/deb_2161_2.nasl
2011-01-31	Name : CentOS Update for openssl CESA-2010:0977 centos4 i386 File : nvt/gb_CESA-2010_0977_openssl_centos4_i386.nasl
2011-01-04	Name : HP-UX Update for Java HPSBUX02608 File : nvt/gb_hp_ux_HPSBUX02608.nasl
2010-12-28	Name : RedHat Update for openssl RHSA-2010:0977-01 File : nvt/gb_RHSA-2010_0977-01_openssl.nasl
2010-12-02	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16312 File : nvt/gb_fedora_2010_16312_java-1.6.0-openjdk_fc14.nasl
2010-11-23	Name : Fedora Update for openssl FEDORA-2010-17826 File : nvt/gb_fedora_2010_17826_openssl_fc12.nasl
2010-11-16	Name : Fedora Update for nss FEDORA-2010-15989 File : nvt/gb_fedora_2010_15989_nss_fc12.nasl
2010-11-16	Name : Fedora Update for proftpd FEDORA-2010-17220 File : nvt/gb_fedora_2010_17220_proftpd_fc12.nasl
2010-11-04	Name : Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1010-1 File : nvt/gb_ubuntu_USN_1010_1.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16240 File : nvt/gb_fedora_2010_16240_java-1.6.0-openjdk_fc12.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16294 File : nvt/gb_fedora_2010_16294_java-1.6.0-openjdk_fc13.nasl
2010-10-19	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 File : nvt/gb_RHSA-2010_0768-01_java-1.6.0-openjdk.nasl
2010-10-19	Name : Ubuntu Update for openssl vulnerabilities USN-1003-1 File : nvt/gb_ubuntu_USN_1003_1.nasl
2010-09-27	Name : Ubuntu Update for openssl vulnerability USN-990-1 File : nvt/gb_ubuntu_USN_990_1.nasl
2010-09-27	Name : Ubuntu Update for apache2 vulnerability USN-990-2 File : nvt/gb_ubuntu_USN_990_2.nasl
2010-08-11	Name : Remote Code Execution Vulnerabilities in SChannel (980436) File : nvt/secpod_ms10-049.nasl
2010-07-26	Name : Ubuntu Update for nss vulnerability USN-927-6 File : nvt/gb_ubuntu_USN_927_6.nasl
2010-07-23	Name : RedHat Update for openldap RHSA-2010:0543-01 File : nvt/gb_RHSA-2010_0543-01_openldap.nasl
2010-07-06	Name : Debian Security Advisory DSA 2062-1 (sudo) File : nvt/deb_2062_1.nasl
2010-07-02	Name : Ubuntu Update for nss vulnerability USN-927-4 File : nvt/gb_ubuntu_USN_927_4.nasl
2010-07-02	Name : Ubuntu Update for nspr update USN-927-5 File : nvt/gb_ubuntu_USN_927_5.nasl
2010-07-02	Name : Ubuntu Update for sudo vulnerability USN-956-1 File : nvt/gb_ubuntu_USN_956_1.nasl
2010-06-28	Name : Fedora Update for gnutls FEDORA-2010-9487 File : nvt/gb_fedora_2010_9487_gnutls_fc12.nasl
2010-06-25	Name : Fedora Update for sudo FEDORA-2010-9415 File : nvt/gb_fedora_2010_9415_sudo_fc12.nasl
2010-06-25	Name : Fedora Update for sudo FEDORA-2010-9417 File : nvt/gb_fedora_2010_9417_sudo_fc11.nasl
2010-06-25	Name : Fedora Update for openssl FEDORA-2010-9421 File : nvt/gb_fedora_2010_9421_openssl_fc11.nasl
2010-06-25	Name : Fedora Update for gnutls FEDORA-2010-9518 File : nvt/gb_fedora_2010_9518_gnutls_fc13.nasl
2010-06-18	Name : RedHat Update for sudo RHSA-2010:0475-01 File : nvt/gb_RHSA-2010_0475-01_sudo.nasl
2010-06-18	Name : Fedora Update for sudo FEDORA-2010-9402 File : nvt/gb_fedora_2010_9402_sudo_fc13.nasl
2010-06-18	Name : Fedora Update for openssl FEDORA-2010-9639 File : nvt/gb_fedora_2010_9639_openssl_fc12.nasl
2010-06-18	Name : Mandriva Update for sudo MDVSA-2010:118 (sudo) File : nvt/gb_mandriva_MDVSA_2010_118.nasl
2010-06-07	Name : Fedora Update for httpd FEDORA-2010-6055 File : nvt/gb_fedora_2010_6055_httpd_fc12.nasl
2010-06-07	Name : HP-UX Update for Java HPSBUX02524 File : nvt/gb_hp_ux_HPSBUX02524.nasl
2010-06-07	Name : HP-UX Update for Apache-based Web Server HPSBUX02531 File : nvt/gb_hp_ux_HPSBUX02531.nasl
2010-06-03	Name : FreeBSD Ports: sudo File : nvt/freebsd_sudo7.nasl
2010-05-28	Name : Fedora Update for openssl FEDORA-2010-8742 File : nvt/gb_fedora_2010_8742_openssl_fc12.nasl
2010-05-28	Name : Java for Mac OS X 10.5 Update 7 File : nvt/macosx_java_for_10_5_upd_7.nasl
2010-05-28	Name : Java for Mac OS X 10.6 Update 2 File : nvt/macosx_java_for_10_6_upd_2.nasl
2010-05-12	Name : Mac OS X 10.6.2 Update / Mac OS X Security Update 2009-006 File : nvt/macosx_upd_10_6_2_secupd_2009-006.nasl
2010-05-07	Name : Fedora Update for httpd FEDORA-2010-6131 File : nvt/gb_fedora_2010_6131_httpd_fc11.nasl
2010-05-07	Name : Fedora Update for nss_db FEDORA-2010-6331 File : nvt/gb_fedora_2010_6331_nss_db_fc11.nasl
2010-05-07	Name : Fedora Update for nss_db FEDORA-2010-6361 File : nvt/gb_fedora_2010_6361_nss_db_fc12.nasl
2010-04-30	Name : HP-UX Update for OpenSSL HPSBUX02517 File : nvt/gb_hp_ux_HPSBUX02517.nasl
2010-04-30	Name : Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 (java-1.6.0-openjdk) File : nvt/gb_mandriva_MDVSA_2010_084.nasl
2010-04-29	Name : Mandriva Update for firefox MDVSA-2010:070-1 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070_1.nasl
2010-04-29	Name : Mandriva Update for openssl MDVSA-2010:076-1 (openssl) File : nvt/gb_mandriva_MDVSA_2010_076_1.nasl
2010-04-29	Name : SuSE Update for MozillaFirefox,MozillaThunderbird,seamonkey,mozilla-nss SUSE-... File : nvt/gb_suse_2010_021.nasl
2010-04-21	Name : FreeBSD Ports: curl File : nvt/freebsd_curl3.nasl
2010-04-20	Name : OpenSSL 'dtls1_retrieve_buffered_fragment()' Remote Denial of Service Vulnera... File : nvt/gb_openssl_38533.nasl
2010-04-19	Name : Fedora Update for openssl FEDORA-2010-5357 File : nvt/gb_fedora_2010_5357_openssl_fc11.nasl
2010-04-19	Name : Mandriva Update for openssl MDVSA-2010:076 (openssl) File : nvt/gb_mandriva_MDVSA_2010_076.nasl
2010-04-19	Name : Mandriva Update for nss_db MDVSA-2010:077 (nss_db) File : nvt/gb_mandriva_MDVSA_2010_077.nasl
2010-04-16	Name : RedHat Update for nss_db RHSA-2010:0347-01 File : nvt/gb_RHSA-2010_0347-01_nss_db.nasl
2010-04-16	Name : Mandriva Update for firefox MDVSA-2010:070 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070.nasl
2010-04-16	Name : Ubuntu Update for nss vulnerability USN-927-1 File : nvt/gb_ubuntu_USN_927_1.nasl
2010-04-09	Name : CentOS Update for curl CESA-2010:0329 centos3 i386 File : nvt/gb_CESA-2010_0329_curl_centos3_i386.nasl
2010-04-09	Name : CentOS Update for curl CESA-2010:0329 centos4 i386 File : nvt/gb_CESA-2010_0329_curl_centos4_i386.nasl
2010-04-09	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-6025 File : nvt/gb_fedora_2010_6025_java-1.6.0-openjdk_fc12.nasl
2010-04-09	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-6039 File : nvt/gb_fedora_2010_6039_java-1.6.0-openjdk_fc11.nasl
2010-04-09	Name : Mandriva Update for nss MDVSA-2010:069 (nss) File : nvt/gb_mandriva_MDVSA_2010_069.nasl
2010-04-09	Name : Ubuntu Update for openjdk-6 vulnerabilities USN-923-1 File : nvt/gb_ubuntu_USN_923_1.nasl
2010-04-07	Name : Oracle Java SE Multiple Vulnerabilities (Linux) File : nvt/gb_oracle_java_se_mult_vuln_lin_apr10.nasl
2010-04-07	Name : Oracle Java SE Multiple Vulnerabilities (Windows) File : nvt/gb_oracle_java_se_mult_vuln_win_apr10.nasl
2010-04-06	Name : Debian Security Advisory DSA 2023-1 (curl) File : nvt/deb_2023_1.nasl
2010-04-06	Name : FreeBSD Ports: seamonkey File : nvt/freebsd_seamonkey0.nasl
2010-04-06	Name : RedHat Update for openldap RHSA-2010:0198-04 File : nvt/gb_RHSA-2010_0198-04_openldap.nasl
2010-04-06	Name : RedHat Update for curl RHSA-2010:0273-05 File : nvt/gb_RHSA-2010_0273-05_curl.nasl
2010-04-06	Name : RedHat Update for curl RHSA-2010:0329-01 File : nvt/gb_RHSA-2010_0329-01_curl.nasl
2010-04-06	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0339-01 File : nvt/gb_RHSA-2010_0339-01_java-1.6.0-openjdk.nasl
2010-04-06	Name : Ubuntu Update for libnss-db vulnerability USN-922-1 File : nvt/gb_ubuntu_USN_922_1.nasl
2010-04-06	Name : Mac OS X Security Update 2010-001 File : nvt/macosx_secupd_2010-001.nasl
2010-03-31	Name : CentOS Update for openssl CESA-2010:0163 centos3 i386 File : nvt/gb_CESA-2010_0163_openssl_centos3_i386.nasl
2010-03-31	Name : CentOS Update for openssl CESA-2010:0163 centos4 i386 File : nvt/gb_CESA-2010_0163_openssl_centos4_i386.nasl
2010-03-31	Name : CentOS Update for nspr CESA-2010:0165 centos4 i386 File : nvt/gb_CESA-2010_0165_nspr_centos4_i386.nasl
2010-03-31	Name : CentOS Update for gnutls CESA-2010:0167 centos4 i386 File : nvt/gb_CESA-2010_0167_gnutls_centos4_i386.nasl
2010-03-31	Name : CentOS Update for openssl096b CESA-2010:0173 centos3 i386 File : nvt/gb_CESA-2010_0173_openssl096b_centos3_i386.nasl
2010-03-31	Name : CentOS Update for openssl096b CESA-2010:0173 centos4 i386 File : nvt/gb_CESA-2010_0173_openssl096b_centos4_i386.nasl
2010-03-31	Name : RedHat Update for openssl RHSA-2010:0162-01 File : nvt/gb_RHSA-2010_0162-01_openssl.nasl
2010-03-31	Name : RedHat Update for openssl RHSA-2010:0163-01 File : nvt/gb_RHSA-2010_0163-01_openssl.nasl
2010-03-31	Name : RedHat Update for openssl097a RHSA-2010:0164-01 File : nvt/gb_RHSA-2010_0164-01_openssl097a.nasl
2010-03-31	Name : RedHat Update for nss RHSA-2010:0165-01 File : nvt/gb_RHSA-2010_0165-01_nss.nasl
2010-03-31	Name : RedHat Update for gnutls RHSA-2010:0166-01 File : nvt/gb_RHSA-2010_0166-01_gnutls.nasl
2010-03-31	Name : RedHat Update for gnutls RHSA-2010:0167-01 File : nvt/gb_RHSA-2010_0167-01_gnutls.nasl
2010-03-31	Name : RedHat Update for openssl096b RHSA-2010:0173-02 File : nvt/gb_RHSA-2010_0173-02_openssl096b.nasl
2010-03-31	Name : Fedora Update for nss FEDORA-2010-3905 File : nvt/gb_fedora_2010_3905_nss_fc11.nasl
2010-03-22	Name : Fedora Update for curl FEDORA-2010-2720 File : nvt/gb_fedora_2010_2720_curl_fc11.nasl
2010-03-22	Name : Mandriva Update for curl MDVSA-2010:062 (curl) File : nvt/gb_mandriva_MDVSA_2010_062.nasl
2010-03-12	Name : Fedora Update for curl FEDORA-2010-2762 File : nvt/gb_fedora_2010_2762_curl_fc12.nasl
2010-03-12	Name : Mandriva Update for cacti MDVA-2010:089 (cacti) File : nvt/gb_mandriva_MDVA_2010_089.nasl
2010-03-10	Name : OpenSSL 'bn_wexpand()' Multiple Vulnerabilities (Win) File : nvt/gb_openssl_bnwexpand_mul_vuln_win.nasl
2010-03-10	Name : OpenSSL 'kssl_keytab_is_available()' Denial Of Service Vulnerability (Win) File : nvt/gb_openssl_sslkss_dos_vuln_win.nasl
2010-03-05	Name : Fedora Update for openldap FEDORA-2010-0752 File : nvt/gb_fedora_2010_0752_openldap_fc11.nasl
2010-03-02	Name : Fedora Update for httpd FEDORA-2009-12747 File : nvt/gb_fedora_2009_12747_httpd_fc11.nasl
2010-03-02	Name : Fedora Update for nss FEDORA-2010-1127 File : nvt/gb_fedora_2010_1127_nss_fc12.nasl
2010-03-02	Name : Mandriva Update for rsh MDVA-2010:076 (rsh) File : nvt/gb_mandriva_MDVA_2010_076.nasl
2010-03-02	Name : Mandriva Update for x11-driver-video-ati MDVA-2010:084 (x11-driver-video-ati) File : nvt/gb_mandriva_MDVA_2010_084.nasl
2010-02-19	Name : Mandriva Update for drakxtools MDVA-2010:062 (drakxtools) File : nvt/gb_mandriva_MDVA_2010_062.nasl
2010-02-19	Name : Mandriva Update for drakxtools MDVA-2010:062-1 (drakxtools) File : nvt/gb_mandriva_MDVA_2010_062_1.nasl
2010-02-19	Name : Mandriva Update for mandriva-release MDVA-2010:069 (mandriva-release) File : nvt/gb_mandriva_MDVA_2010_069.nasl
2010-02-11	Name : Microsoft Windows TLS/SSL Spoofing Vulnerability (977377) File : nvt/gb_ms_tls_ssl_spoofing_vuln.nasl
2010-01-29	Name : Mandriva Update for openldap MDVSA-2010:026 (openldap) File : nvt/gb_mandriva_MDVSA_2010_026.nasl
2010-01-20	Name : RedHat Update for openssl RHSA-2010:0054-01 File : nvt/gb_RHSA-2010_0054-01_openssl.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-12229 (tomcat-native) File : nvt/fcore_2009_12229.nasl
2009-12-30	Name : Fedora Core 11 FEDORA-2009-12305 (tomcat-native) File : nvt/fcore_2009_12305.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-12606 (httpd) File : nvt/fcore_2009_12606.nasl
2009-12-30	Name : Fedora Core 11 FEDORA-2009-13236 (proftpd) File : nvt/fcore_2009_13236.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-13250 (proftpd) File : nvt/fcore_2009_13250.nasl
2009-12-14	Name : Fedora Core 10 FEDORA-2009-12604 (httpd) File : nvt/fcore_2009_12604.nasl
2009-12-14	Name : Fedora Core 12 FEDORA-2009-12968 (nss-util) File : nvt/fcore_2009_12968.nasl
2009-12-14	Name : Gentoo Security Advisory GLSA 200912-01 (openssl) File : nvt/glsa_200912_01.nasl
2009-12-10	Name : Debian Security Advisory DSA 1943-1 (openldap openldap2.3) File : nvt/deb_1943_1.nasl
2009-12-10	Name : Fedora Core 12 FEDORA-2009-12750 (nginx) File : nvt/fcore_2009_12750.nasl
2009-12-10	Name : Fedora Core 10 FEDORA-2009-12775 (nginx) File : nvt/fcore_2009_12775.nasl
2009-12-10	Name : Fedora Core 11 FEDORA-2009-12782 (nginx) File : nvt/fcore_2009_12782.nasl
2009-12-10	Name : FreeBSD Security Advisory (FreeBSD-SA-09:15.ssl.asc) File : nvt/freebsdsa_ssl.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:197-3 (nss) File : nvt/mdksa_2009_197_3.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:310 (openssl) File : nvt/mdksa_2009_310.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:323 (apache) File : nvt/mdksa_2009_323.nasl
2009-11-23	Name : Debian Security Advisory DSA 1935-1 (gnutls13 gnutls26) File : nvt/deb_1935_1.nasl
2009-11-23	Name : CentOS Security Advisory CESA-2009:1584 (java-1.6.0-openjdk) File : nvt/ovcesa2009_1584.nasl
2009-11-23	Name : SLES9: Security update for OpenSSL File : nvt/sles9p5062661.nasl
2009-11-23	Name : SuSE Security Advisory SUSE-SA:2009:057 (openssl) File : nvt/suse_sa_2009_057.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1571 File : nvt/RHSA_2009_1571.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1579 File : nvt/RHSA_2009_1579.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1580 File : nvt/RHSA_2009_1580.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1584 File : nvt/RHSA_2009_1584.nasl
2009-11-17	Name : Fedora Core 11 FEDORA-2009-11486 (java-1.6.0-openjdk) File : nvt/fcore_2009_11486.nasl
2009-11-17	Name : Fedora Core 12 FEDORA-2009-11489 (java-1.6.0-openjdk) File : nvt/fcore_2009_11489.nasl
2009-11-17	Name : Fedora Core 10 FEDORA-2009-11490 (java-1.6.0-openjdk) File : nvt/fcore_2009_11490.nasl
2009-11-17	Name : CentOS Security Advisory CESA-2009:1579 (httpd) File : nvt/ovcesa2009_1579.nasl
2009-11-17	Name : CentOS Security Advisory CESA-2009:1580 (httpd) File : nvt/ovcesa2009_1580.nasl
2009-11-17	Name : SLES10: Security update for OpenSSL File : nvt/sles10_compat-openssl02.nasl
2009-11-17	Name : SLES10: Security update for OpenSSL File : nvt/sles10_openssl3.nasl
2009-11-17	Name : SLES11: Security update for libopenssl File : nvt/sles11_libopenssl0_9_82.nasl
2009-11-17	Name : Ubuntu USN-858-1 (openldap2.2) File : nvt/ubuntu_858_1.nasl
2009-11-11	Name : RedHat Security Advisory RHSA-2009:1560 File : nvt/RHSA_2009_1560.nasl
2009-10-13	Name : Mandrake Security Advisory MDVSA-2009:258 (openssl) File : nvt/mdksa_2009_258.nasl
2009-09-28	Name : Mandrake Security Advisory MDVSA-2009:237 (openssl) File : nvt/mdksa_2009_237.nasl
2009-09-28	Name : Mandrake Security Advisory MDVSA-2009:238 (openssl) File : nvt/mdksa_2009_238.nasl
2009-09-28	Name : Mandrake Security Advisory MDVSA-2009:239 (openssl) File : nvt/mdksa_2009_239.nasl
2009-09-21	Name : Debian Security Advisory DSA 1888-1 (openssl, openssl097) File : nvt/deb_1888_1.nasl
2009-09-15	Name : RedHat Security Advisory RHSA-2009:1432 File : nvt/RHSA_2009_1432.nasl
2009-09-15	Name : Mandrake Security Advisory MDVSA-2009:197-2 (nss) File : nvt/mdksa_2009_197_2.nasl
2009-09-15	Name : CentOS Security Advisory CESA-2009:1432 (seamonkey) File : nvt/ovcesa2009_1432.nasl
2009-09-15	Name : Ubuntu USN-830-1 (openssl) File : nvt/ubuntu_830_1.nasl
2009-09-02	Name : Debian Security Advisory DSA 1874-1 (nss) File : nvt/deb_1874_1.nasl
2009-09-02	Name : Mandrake Security Advisory MDVSA-2009:216 (mozilla-thunderbird) File : nvt/mdksa_2009_216.nasl
2009-09-02	Name : Ubuntu USN-809-1 (gnutls26) File : nvt/ubuntu_809_1.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1184 File : nvt/RHSA_2009_1184.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1186 File : nvt/RHSA_2009_1186.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1190 File : nvt/RHSA_2009_1190.nasl
2009-08-17	Name : RedHat Security Advisory RHSA-2009:1207 File : nvt/RHSA_2009_1207.nasl
2009-08-17	Name : Mandrake Security Advisory MDVSA-2009:197 (nss) File : nvt/mdksa_2009_197.nasl
2009-08-17	Name : Ubuntu USN-810-1 (nss) File : nvt/ubuntu_810_1.nasl
2009-08-17	Name : Ubuntu USN-810-2 (fixed) File : nvt/ubuntu_810_2.nasl
2009-08-05	Name : Firefox SSL Server Spoofing Vulnerability (Win) File : nvt/gb_firefox_ssl_spoof_vuln_win.nasl
2009-08-05	Name : OpenSSL/GnuTLS SSL Server Spoofing Vulnerability (Win) File : nvt/gb_openssl_n_gnutls_ssl_spoof_vuln_win.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-320-01 openssl File : nvt/esoft_slk_ssa_2009_320_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-060-02 openssl File : nvt/esoft_slk_ssa_2010_060_02.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-067-01 httpd File : nvt/esoft_slk_ssa_2010_067_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-090-01 openssl File : nvt/esoft_slk_ssa_2010_090_01.nasl
0000-00-00	Name : OpenSSL 'bn_wexpend()' Error Handling Unspecified Vulnerability File : nvt/gb_openssl_38562.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
77832	Parallels Plesk Panel Billing System TLS Renegotiation Handshakes MiTM Plaint...
75622	Blue Coat Director TLS Renegotiation Handshakes MiTM Plaintext Data Injection
74335	Hitachi Web Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection Hitachi Web Server contains a flaw related to the SSL protocol failing to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
71961	Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes ... Oracle Fusion Middleware contains a flaw related to the Oracle WebLogic Server component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
71951	Oracle Multiple Products Oracle Security Service TLS Renegotiation Handshakes... Oracle Database and Fusion Middleware contain a flaw related to the Oracle Security Service component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
70620	mGuard TLS Renegotiation Handshakes MiTM Plaintext Data Injection mGuard contains a flaw related to the TLS protocol's failure to properly associate renegotiation handshakes with an existing connection. The issue is triggered when a man-in-the-middle attacker uses unauthenticated requests processed retroactively. This may allow an attacker to inject data into HTTPS sessions.
70055	Oracle Supply Chain Transportation Management TLS Renegotiation Handshakes Mi... Oracle Supply Chain contains a flaw related to the Transportation Management component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
69561	IBM WebSphere MQ Internet Pass-Thru TLS Renegotiation Handshake MiTM Plaintex... IBM WebSphere MQ Internet Pass-Thru contains a flaw related to the TLS Renegotiation Handshake protocol. The issue is triggered when a remote attacker uses a MiTM attack to insert arbitrary plaintext into data sent by a legitimate client.
69032	Oracle Java SE / Java for Business TLS Renegotiation Handshake MiTM Plaintext... Oracle Java SE and Java for Business contains a flaw related to the JSSE component. The application fails to properly associate renegotiation handshakes with an existing connection, allowing a MiTM attacker to use an unauthenticated request to insert data into HTTPS sessions, related to a 'plaintext injection' attack
67029	HP Threat Management Services zl Module TLS Renegotiation Handshakes MiTM Pla...
66315	HP Insight Manager TLS Renegotiation Handshakes MiTM Plaintext Data Injection
65202	OpenOffice.org (OOo) TLS Renegotiation Handshakes MiTM Plaintext Data Injection
65083	sudo env.c secure path Restrictions Bypass Arbitrary File Execution sudo contains a flaw that may allow an attacker to execute arbitrary files with elevated privileges. The issue is triggered when sudo is configured to use a secure path and the PATH variable is defined twice.
64725	HP System Management Homepage (SMH) TLS Renegotiation Handshakes MiTM Plainte...
64499	ArubaOS HTTPS WebUI Admin Interface TLS Renegotiation Handshakes MiTM Plainte...
64040	IBM DB2 TLS Renegotiation Handshakes MiTM Plaintext Data Injection
63638	Berkeley DB NSS module (libnss-db) DB_CONFIG setgid / setuid Application Syml...
62877	SSH Tectia Audit Player TLS Renegotiation Handshakes MiTM Plaintext Data Inje...
62844	OpenSSL bn_wexpand Function NULL Return Value Check Weakness
62719	OpenSSL Kerberos ssl/kssl.c kssk_keytab_is_available() Function NULL Derefere...
62536	Blue Coat Products TLS Renegotiation Handshakes MiTM Plaintext Data Injection
62273	Opera TLS Renegotiation Handshakes MiTM Plaintext Data Injection
62217	cURL / libcURL Compressed HTTP Content Registered Callback Overflow
62210	Aruba Mobility Controller TLS Renegotiation Handshakes MiTM Plaintext Data In...
62135	Network Security Services (NSS) TLS Renegotiation Handshakes MiTM Plaintext D...
62064	IBM Java TLS Renegotiation Handshakes MiTM Plaintext Data Injection
61929	IBM WebSphere Application Server TLS Renegotiation Handshakes MiTM Plaintext ...
61785	Avaya Products Multiple Product TLS Renegotiation Handshakes MiTM Plaintext D...
61784	Sun Java System Multiple Product TLS Renegotiation Handshakes MiTM Plaintext ...
61718	IBM WebSphere DataPower TLS Renegotiation Handshakes MiTM Plaintext Data Inje...
61234	IBM SDK for Java TLS Renegotiation Handshakes MiTM Plaintext Data Injection
60521	Ingate Firewall/SIParator SSL / TLS Renegotiation Handshakes MiTM Plaintext D...
60366	Cisco Multiple Devices TLS Renegotiation Handshakes MiTM Plaintext Data Injec...
59974	MatrixSSL TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59973	Citrix Secure Gateway TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59972	GnuTLS TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59971	OpenSSL TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59970	Mozilla Network Security Services (NSS) SSL / TLS Renegotiation Handshakes Mi...
59969	Apache HTTP Server mod_ssl SSL / TLS Renegotiation Handshakes MiTM Plaintext ...
59968	Microsoft Multiple Products SSL / TLS Renegotiation Handshakes MiTM Plaintext...
59268	OpenLDAP libraries/libldap/tls_o.c Certificate Authority (CA) Common Name Nul...
56752	Network Security Services (NSS) Library X.509 Certificate MD2 Hash Collision ...

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-05-03	IAVM : 2012-B-0048 - Multiple Vulnerabilities in HP Systems Insight Manager Severity : Category I - VMSKEY : V0032178
2012-04-05	IAVM : 2012-B-0038 - Multiple Vulnerabilities in HP Onboard Administrator Severity : Category I - VMSKEY : V0031972
2011-05-12	IAVM : 2011-A-0066 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0027158

Nessus® Vulnerability Scanner

Date	Description
2018-04-03	Name : The remote web server may allow remote code execution. File : iis_7_pci.nasl - Type : ACT_GATHER_INFO
2018-03-09	Name : The remote web server is affected by multiple vulnerabilities. File : nginx_0_7_64.nasl - Type : ACT_GATHER_INFO
2017-11-17	Name : The remote host is affected by a MITM vulnerability. File : fortios_FG-IR-17-137.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0001_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2010-0009_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0015_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0019_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0003_remote.nasl - Type : ACT_GATHER_INFO
2016-01-25	Name : The remote Debian host is missing a security update. File : debian_DLA-400.nasl - Type : ACT_GATHER_INFO
2015-05-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3253.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0007.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0008.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0476.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL10737.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15404.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15663.nasl - Type : ACT_GATHER_INFO
2014-07-01	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-36.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_sudo-110114.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_ssl_advisory.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_abad20bfc1b411e3a5ac001b21614864.nasl - Type : ACT_GATHER_INFO
2013-11-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201311-13.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-15.nasl - Type : ACT_GATHER_INFO
2013-07-15	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2010-0015.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1184.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1431.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1432.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1584.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0054.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0173.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0329.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0347.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0475.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0543.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1584.nasl - Type : ACT_GATHER_INFO
2013-03-09	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-810-3.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a runtime environment that is affected by multi... File : oracle_java_cpu_mar_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a programming platform that is affected by mult... File : oracle_java_cpu_oct_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-02-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2626.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1190.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1207.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0880.nasl - Type : ACT_GATHER_INFO
2013-01-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-01.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090731_nspr_and_nss_for_SL_4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090731_nspr_and_nss_for_SL_5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090909_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091109_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091111_httpd_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100119_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_gnutls_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_nss_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100325_openssl096b_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100325_openssl097a_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_openssl_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100330_curl_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100330_curl_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100330_curl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100330_openldap_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100331_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100331_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100413_nss_db_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100615_sudo_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101013_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101014_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_java_1_6_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101213_openssl_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-18.nasl - Type : ACT_GATHER_INFO
2012-06-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201203-22.nasl - Type : ACT_GATHER_INFO
2012-06-15	Name : The remote Windows host contains software that is affected by multiple vulner... File : hp_systems_insight_manager_700_multiple_vulns.nasl - Type : ACT_GATHER_INFO
2012-05-17	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7036.nasl - Type : ACT_GATHER_INFO
2012-04-20	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_7_0_0_24.nasl - Type : ACT_GATHER_INFO
2012-03-06	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201203-02.nasl - Type : ACT_GATHER_INFO
2012-01-04	Name : The remote server is affected by multiple vulnerabilities. File : openssl_0_9_8l.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7645.nasl - Type : ACT_GATHER_INFO
2011-10-12	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-05.nasl - Type : ACT_GATHER_INFO
2011-10-10	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-01.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7644.nasl - Type : ACT_GATHER_INFO
2011-06-24	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_6_8.nasl - Type : ACT_GATHER_INFO
2011-06-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1158-1.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote database server is affected by multiple vulnerabilities. File : oracle_rdbms_cpu_apr_2011.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_sudo-110114.nasl - Type : ACT_GATHER_INFO
2011-05-02	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12705.nasl - Type : ACT_GATHER_INFO
2011-04-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1662.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100407.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0003.nasl - Type : ACT_GATHER_INFO
2011-01-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gnutls-7299.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-sun-7204.nasl - Type : ACT_GATHER_INFO
2011-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-101220.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing a security update. File : suse_11_java-1_4_2-ibm-100510.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-101112.nasl - Type : ACT_GATHER_INFO
2011-01-10	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2141.nasl - Type : ACT_GATHER_INFO
2010-12-17	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12658.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0987.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libfreebl3-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-100331.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7205.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12659.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0865.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1010-1.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0807.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-16240.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0786.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote web server is affected by multiple vulnerabilities. File : apache_2_0_64.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote web server is affected by multiple vulnerabilities File : apache_2_2_15.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-16294.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update8.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update3.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote Fedora host is missing a security update. File : fedora_2010-16312.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Windows host contains a programming platform that is affected by m... File : oracle_java_cpu_oct_2010.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0770.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6979.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-6657.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7077.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-nss-6978.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6971.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6655.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6944.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1003-1.nasl - Type : ACT_GATHER_INFO
2010-10-04	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0015.nasl - Type : ACT_GATHER_INFO
2010-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-990-1.nasl - Type : ACT_GATHER_INFO
2010-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-990-2.nasl - Type : ACT_GATHER_INFO
2010-09-17	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_6_2_0_12.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201009-03.nasl - Type : ACT_GATHER_INFO
2010-09-07	Name : The remote database server is affected by multiple vulnerabilities. File : db2_95fp6.nasl - Type : ACT_GATHER_INFO
2010-08-11	Name : It may be possible to execute arbitrary code on the remote Windows host using... File : smb_nt_ms10-049.nasl - Type : ACT_GATHER_INFO
2010-07-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-239.nasl - Type : ACT_GATHER_INFO
2010-07-30	Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2010-077.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0543.nasl - Type : ACT_GATHER_INFO
2010-07-26	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-6.nasl - Type : ACT_GATHER_INFO
2010-07-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0543.nasl - Type : ACT_GATHER_INFO
2010-07-07	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12623.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2009-12747.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-0752.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-1127.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-2720.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-2762.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3905.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3929.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3956.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5357.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5744.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5942.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6025.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6039.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6131.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6203.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6279.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6331.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6361.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8742.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9402.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9415.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9417.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9487.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9518.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-956-1.nasl - Type : ACT_GATHER_INFO
2010-06-30	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-4.nasl - Type : ACT_GATHER_INFO
2010-06-21	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2062.nasl - Type : ACT_GATHER_INFO
2010-06-18	Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2010-118.nasl - Type : ACT_GATHER_INFO
2010-06-17	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0475.nasl - Type : ACT_GATHER_INFO
2010-06-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0475.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_4.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote host is missing a Mac OS X update that fixes a security issue. File : macosx_SecUpd2010-004.nasl - Type : ACT_GATHER_INFO
2010-06-14	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2010-06-11	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12621.nasl - Type : ACT_GATHER_INFO
2010-06-07	Name : The remote Windows host has an application installed that is affected by mult... File : openoffice_321.nasl - Type : ACT_GATHER_INFO
2010-06-04	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201006-18.nasl - Type : ACT_GATHER_INFO
2010-06-03	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_d42e5b666ea011df9c8d00e0815b8da8.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0347.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote database server is affected by multiple vulnerabilities. File : db2_97fp2.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2010-0009.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote web server has multiple vulnerabilities. File : hpsmh_6_1_0_102.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update7.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update2.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0155.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0173.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0198.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0273.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0329.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0337.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0338.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0347.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-openjdk-100428.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-100428.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-100412.nasl - Type : ACT_GATHER_INFO
2010-04-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-084.nasl - Type : ACT_GATHER_INFO
2010-04-28	Name : The remote database server is affected by multiple issues. File : db2_9fp9.nasl - Type : ACT_GATHER_INFO
2010-04-20	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_c8c31c4149ed11df83fb0015587e2cc1.nasl - Type : ACT_GATHER_INFO
2010-04-19	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-076.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-070.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaFirefox-branding-openSUSE-100413.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaFirefox-100412.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libfreebl3-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libfreebl3-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libfreebl3-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6970.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-nspr-6977.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6976.nasl - Type : ACT_GATHER_INFO
2010-04-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-1.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0329.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-069.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-100401.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-923-1.nasl - Type : ACT_GATHER_INFO
2010-04-02	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-090-01.nasl - Type : ACT_GATHER_INFO
2010-04-02	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12606.nasl - Type : ACT_GATHER_INFO
2010-04-01	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-922-1.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_9ccfee393c3b11df9edc000f20797ede.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_359.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_304.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_204.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6943.nasl - Type : ACT_GATHER_INFO
2010-03-30	Name : The remote Windows host contains a runtime environment that is affected by mu... File : oracle_java_cpu_mar_2010.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2023.nasl - Type : ACT_GATHER_INFO
2010-03-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2010-03-26	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0173.nasl - Type : ACT_GATHER_INFO
2010-03-26	Name : The remote web server has multiple SSL-related vulnerabilities. File : openssl_0_9_8n.nasl - Type : ACT_GATHER_INFO
2010-03-23	Name : The remote Windows host contains a web browser that is affected by Multiple V... File : mozilla_firefox_362.nasl - Type : ACT_GATHER_INFO
2010-03-22	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-062.nasl - Type : ACT_GATHER_INFO
2010-03-11	Name : The remote web server has multiple SSL-related vulnerabilities. File : openssl_0_9_8m.nasl - Type : ACT_GATHER_INFO
2010-03-09	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-067-01.nasl - Type : ACT_GATHER_INFO
2010-03-04	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0130.nasl - Type : ACT_GATHER_INFO
2010-03-02	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-060-02.nasl - Type : ACT_GATHER_INFO
2010-03-02	Name : The remote host contains a web browser that is affected by multiple issues. File : opera_1050.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1874.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1888.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1934.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1935.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1943.nasl - Type : ACT_GATHER_INFO
2010-01-27	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-026.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0054.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2010-001.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0054.nasl - Type : ACT_GATHER_INFO
2010-01-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0001.nasl - Type : ACT_GATHER_INFO
2009-12-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-13236.nasl - Type : ACT_GATHER_INFO
2009-12-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-13250.nasl - Type : ACT_GATHER_INFO
2009-12-27	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1694.nasl - Type : ACT_GATHER_INFO
2009-12-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-337.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12229.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12305.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12606.nasl - Type : ACT_GATHER_INFO
2009-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-12604.nasl - Type : ACT_GATHER_INFO
2009-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-12968.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12750.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12775.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12782.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-323.nasl - Type : ACT_GATHER_INFO
2009-12-04	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-310.nasl - Type : ACT_GATHER_INFO
2009-12-02	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200912-01.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-openjdk-091125.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-091125.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-091127.nasl - Type : ACT_GATHER_INFO
2009-11-24	Name : The remote service allows insecure renegotiation of TLS / SSL connections. File : ssl_renegotiation.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-860-1.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200911-02.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12550.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_0_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_1_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_2_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-6656.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6654.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-320-01.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1584.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-11486.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-11489.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-11490.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-859-1.nasl - Type : ACT_GATHER_INFO
2009-11-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-858-1.nasl - Type : ACT_GATHER_INFO
2009-11-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2009-11-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2009-11-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1571.nasl - Type : ACT_GATHER_INFO
2009-11-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1560.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_2.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-006.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-295.nasl - Type : ACT_GATHER_INFO
2009-10-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-258.nasl - Type : ACT_GATHER_INFO
2009-09-22	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-238.nasl - Type : ACT_GATHER_INFO
2009-09-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-830-1.nasl - Type : ACT_GATHER_INFO
2009-09-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1431.nasl - Type : ACT_GATHER_INFO
2009-09-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1432.nasl - Type : ACT_GATHER_INFO
2009-09-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1431.nasl - Type : ACT_GATHER_INFO
2009-09-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1432.nasl - Type : ACT_GATHER_INFO
2009-08-20	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-809-1.nasl - Type : ACT_GATHER_INFO
2009-08-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-197.nasl - Type : ACT_GATHER_INFO
2009-08-05	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-810-1.nasl - Type : ACT_GATHER_INFO
2009-08-05	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-810-2.nasl - Type : ACT_GATHER_INFO
2009-07-31	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1184.nasl - Type : ACT_GATHER_INFO
2009-07-31	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1186.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128640-30 File : solaris10_128640.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128641-30 File : solaris10_x86_128641.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128640-30 File : solaris9_128640.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128641-30 File : solaris9_x86_128641.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris10_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125438-22 File : solaris10_x86_125438.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris8_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris9_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125438-22 File : solaris9_x86_125438.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2016-03-09 13:25:54	Multiple Updates
2014-02-17 12:07:17	Multiple Updates
2013-05-11 00:56:41	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	8
Oval ID(s)	87
CPE ID(s)	1255
osvdb(s)	42
ExploitDB Exploit(s)	1
Openvas Exploit(s)	188
IAVM(s)	3
Nessus® Exploit(s)	367

	Related
10	CVE-2009-3245
8.5	VMSA-2010-0013
6.8	CVE-2010-0734
6.2	CVE-2010-1646
5.8	CVE-2009-3555
5.1	CVE-2009-2409
4.3	CVE-2010-0433
4.3	CVE-2009-3767
1.9	CVE-2010-0826
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 9 more Alert(s)

10 - VMSA-2010-0015

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

ExploitDB Exploits

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU