OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate.

Several vulnerabilities have been discovered in the opensaml and shibboleth-sp packages, as used by Shibboleth 1.x :

  - Chris Ries discovered that decoding a crafted URL leads     to a crash (and potentially, arbitrary code execution).
  - Ian Young discovered that embedded NUL characters in     certificate names were not correctly handled, exposing     configurations using PKIX trust validation to     impersonation attacks.

  - Incorrect processing of SAML metadata ignored key usage     constraints.

Several vulnerabilities have been discovered in the xmltooling packages, as used by Shibboleth :

  - Chris Ries discovered that decoding a crafted URL leads     to a crash (and potentially, arbitrary code execution).
  - Ian Young discovered that embedded NUL characters in     certificate names were not correctly handled, exposing     configurations using PKIX trust validation to     impersonation attacks.

  - Incorrect processing of SAML metadata ignores key usage     constraints. This minor issue also needs a correction in     the opensaml2 packages, which will be provided in an     upcoming stable point release (and, before that, via     stable-proposed-updates).

According to its version, the installation of IBM DB2 9.1 on the remote host is affected by one or more of the following vulnerabilities : 

  - MODIFIED SQL DATA table function is not dropped when definer loses required privileges to maintain the objects. (IZ46773/IZ46774)
  - A user without sufficient privileges could insert, update, or delete rows in a table. (IZ50078/IZ50079)
  - A user can perform 'SET SESSION AUTHORIZATION' without 'SETSESSIONUSER' privilege. (IZ55883)

ID	Name	Product	Family	Severity
44761	Debian DSA-1896-1 : opensaml, shibboleth-sp - several vulnerabilities	Nessus	Debian Local Security Checks	high
44760	Debian DSA-1895-1 : xmltooling - several vulnerabilities	Nessus	Debian Local Security Checks	high
5190	IBM DB2 9.1 < 9.1 Fix Pack 8 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium

Detections

Analytics

CVE-2009-3474

critical

Tenable Plugins

high

high

medium