Lucene search
RedhatCVELIST:CVE-2013-2155HistoryAug 20, 2013 - 10:00 p.m.
CVE-2013-2155
2013-08-2022:00:00
redhat
raw.githubusercontent.com
Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the (1) compareBase64StringToRaw, (2) DSIGAlgorithmHandlerDefault, or (3) DSIGAlgorithmHandlerDefault::verify functions.
Related
cve
cve
CVE-2013-2155
2013-08-20 22:55:00
CVE-2009-0217
2009-07-14 23:30:00
securityvulns
securityvulns
debiancve
debiancve
CVE-2013-2155
2013-08-20 22:55:00
CVE-2009-0217
2009-07-14 23:30:00
prion
prion
Design/Logic Flaw
2013-08-20 22:55:00
Authentication flaw
2009-07-14 23:30:00
ubuntucve
ubuntucve
CVE-2013-2155
2013-08-20 00:00:00
CVE-2009-0217
2009-07-14 00:00:00
nessus
nessus
Fedora 11 : xmlsec1-1.2.12-1.fc11 (2009-8473)
2009-08-12 00:00:00
Mandriva Linux Security Advisory : xmlsec1 (MDVSA-2009:267)
2009-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: xml-security-c-1.5.1-1.fc10
2009-07-31 17:59:26
[SECURITY] Fedora 11 Update: xmlsec1-1.2.12-1.fc11
2009-08-11 22:33:07
[SECURITY] Fedora 11 Update: xml-security-c-1.5.1-1.fc11
2009-07-31 18:04:52
osv
osv
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
2022-05-02 03:13:38
xml-security-c - several
2013-06-18 00:00:00
openoffice.org - several
2010-02-12 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1428
2009-09-09 00:00:00
Fedora Core 11 FEDORA-2009-8157 (xml-security-c)
2009-08-17 00:00:00
Debian Security Advisory DSA 1849-1 (xml-security-c)
2009-08-17 00:00:00
mskb
mskb
cert
cert
XML signature HMAC truncation authentication bypass
2009-07-14 00:00:00
debian
debian
[SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery
2009-08-02 13:48:11
[Backports-security-announce] Security Update for xml-security-c
2009-08-06 08:37:46
[Backports-security-announce] Security Update for xml-security-c
2009-08-06 08:38:10
checkpoint_advisories
checkpoint_advisories
Microsoft XML Signature HMAC Truncation Bypass (MS10-041; CVE-2009-0217)
2010-06-08 00:00:00
cvelist
cvelist
CVE-2009-0217
2009-07-14 23:00:00
github
github
redhat
redhat
(RHSA-2009:1428) Moderate: xmlsec1 security update
2009-09-08 00:00:00
(RHSA-2009:1649) Moderate: JBoss Enterprise Application Platform 4.3.0.CP07 update
2009-12-09 00:00:00
(RHSA-2009:1201) Important: java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
veracode
veracode
Authentication Bypass
2020-04-10 00:35:27
freebsd
freebsd
mono -- XML signature HMAC truncation spoofing
2009-07-15 00:00:00
openoffice.org -- multiple vulnerabilities
2006-08-24 00:00:00
oraclelinux
oraclelinux
xmlsec1 security update
2009-09-09 00:00:00
java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
centos
centos
xmlsec1 security update
2009-09-09 00:48:06
java security update
2009-08-09 04:11:10
ubuntu
ubuntu
Mono vulnerabilities
2009-08-26 00:00:00
OpenOffice.org vulnerabilities
2010-02-24 00:00:00
OpenJDK vulnerabilities
2009-08-11 00:00:00
ibm
ibm
mageia
mageia
Updated xml-security-c package fixes multiple security vulnerabilities
2013-07-01 23:12:07
threatpost
threatpost
OpenOffice Zaps Six Security Bugs
2010-02-18 15:09:26
suse
suse
remote code execution in OpenOffice_org
2010-03-16 16:11:32
remote code execution in java-1_6_0-ibm
2009-11-04 15:26:34
remote code execution in java-1_6_0-ibm
2010-01-12 17:47:21
gentoo
gentoo
Mono: Multiple vulnerabilities
2012-06-21 00:00:00