info
discussion
exploit
solution
references
GnuTLS Prior to 2.2.5 Multiple Remote Vulnerabilities
References:
FileZilla Release 3.0.10
(FileZilla)
GnuTLS 2.2.5 - Brown paper bag release
(GNU)
GnuTLS Homepage
(GNU)
VideoLAN Changelog/0.8.6h
(VideoLAN)
VLC Homepage
(VideoLAN)
CERT-FI Vulnerability Advisory on GnuTLS
(CERT-FI)
Red Hat Linux Security Advisory RHSA-2008:0489-5
(Red Hat)
Red Hat Linux Security Advisory RHSA-2008:0492-6
(Red Hat)
Vulnerability Note VU#111034 GnuTLS Server Name extension Denial of Service
(US-CERT)
Vulnerability Note VU#252626 GnuTLS Client Hello repeat Denial of Service
(US-CERT)
Vulnerability Note VU#659209 GnuTLS Pad Length Denial of Service
(US-CERT)
Privacy Statement
Copyright 2010, SecurityFocus