|
|
| |
|
| |
opensaml: multiple vulnerabilities
| Package(s): | opensaml |
CVE #(s): | |
| Created: | September 28, 2009 |
Updated: | September 30, 2009 |
| Description: |
From the Debian advisory:
Chris Ries discovered that decoding a crafted URL leads to a crash
(and potentially, arbitrary code execution).
Ian Young discovered that embedded NUL characters in certificate names
were not correctly handled, exposing configurations using PKIX trust
validation to impersonation attacks.
Incorrect processing of SAML metadata ignored key usage constraints.
|
| Alerts: |
|
( Log in to post comments)
|
|
|