CVE-2008-3746

Related Files

Ubuntu Security Notice 835-1

Posted Sep 21, 2009

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-835-1 - Joe Orton discovered that neon did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.

tags | advisory, remote

systems | linux, ubuntu

advisories | CVE-2008-3746, CVE-2009-2474

SHA-256 | 968ff370e3a79298a9b7124d53f5b9ece8d5f8e220c123a1a7ea5d7a39c1313c

Download | Favorite | View

Mandriva Linux Security Advisory 2009-074

Posted Mar 12, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-074 - neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication and Digest domain parameter support. The updated packages have been upgraded to version 0.28.3 to prevent this.

tags | advisory, remote, denial of service

systems | linux, mandriva

advisories | CVE-2008-3746

SHA-256 | 7b06ee39c328279e9bacbbdce907799a1dadd04860603f6ae51c2a87c48bb224

Download | Favorite | View