141 matches found
Fedora Core 5 : openssl-0.9.8a-5.3 / openssl097a-0.9.7a-4.2.2 (2006-953)
This is a security update for CVE-2006-4339. Avoid PKCS 1 v1.5 signature attack discovered by Daniel Bleichenbacher Ben Laurie; Google Security Team Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
Mandrake Linux Security Advisory : openssl (MDKSA-2006:161)
Daniel Bleichenbacher recently described an attack on PKCS 1 v1.5 signatures where an RSA key with a small exponent used could be vulnerable to forgery of a PKCS 1 v1.5 signature signed by that key. Any software using OpenSSL to verify X.509 certificates is potentially vulnerable to this issue, a...
Important openssl security update
0.9.7a-43.14 - fix CVE-2006-2937 - mishandled error on ASN.1 parsing 207276 - fix CVE-2006-2940 - parasitic public keys DoS 207274 - fix CVE-2006-3738 - buffer overflow in SSLgetsharedciphers 206940 - fix CVE-2006-4343 - sslv2 client DoS 206940 0.9.7a-43.11 - fix CVE-2006-4339 - prevent attack on...
Solaris 8 (sparc) : 119209-36
NSSNSPRJSS 3.30.2: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2. Date this patch was last updated by Sun : Nov/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory OpenPKG GmbH http://openpkg.org/security/ http://openpkg.com OpenPKG-SA-2006.029 2006-11-04 Package: bind Vulnerability: signature verification failure OpenPKG Specific: no Affected Series: Affected Packages: Corrected...
OpenSSL CVE-2006-4339 8732 vulnerability Fix
...
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SIP over TLS: X.509 peer authentication vulnerability in Ingate products ======================================================================== Product: Ingate Firewall and Ingate SIParator Versions: all current versions Tracking ID: 2829 Summary...
[slackware-security] openssl
New openssl packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a signature forgery security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-433...
CentOS 3 / 4 : openssl (CESA-2006:0661)
Updated OpenSSL packages are now available to correct a security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management...
[SECURITY] [DSA 1173-1] New openssl packages fix RSA signature forgery cryptographic weakness
-------------------------------------------------------------------------- Debian Security Advisory DSA 1173-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 10th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4339
CVE-2006-4339 affects OpenSSL versions prior to 0.9.7 and 0.9.8 before patches (0.9.7k, 0.9.8c) where using an RSA key with exponent 3 causes PKCS#1 padding to be removed before hash generation. This enables remote attackers to forge a PKCS#1 v1.5 signature signed by that RSA key and can prevent ...
OpenSSL Security Advisory [5th September 2006] RSA Signature Forgery (CVE-2006-4339)
OpenSSL Security Advisory 5th September 2006 RSA Signature Forgery CVE-2006-4339 ===================================== Vulnerability ------------- Daniel Bleichenbacher recently described an attack on PKCS 1 v1.5 signatures. If an RSA key with exponent 3 is used it may be possible to forge a PKCS...
CVE-2005-4339
CVE-2005-4339 is an XSS vulnerability in Blackboard Learning and Community Portal System (Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6) where a attacker-supplied context parameter to announcement.pl is reflected in the page. The issue is caused by improper handling of user inpu...
CVE-2005-4339
Cross-site scripting XSS vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the...
Solaris 10 (sparc) : 121229-02
SunOS 5.10: libssl patch. Date this patch was last updated by Sun : Apr/23/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 10 (x86) : 121230-02
SunOS 5.10x86: libssl patch. Date this patch was last updated by Sun : Apr/23/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
Solaris 9 (sparc) : 119211-36
NSSNSPRJSS 3.30.2: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 9 (x86) : 114050-14
SunOS 5.9x86: NSPR 4.1.6 / NSS 3.3.4.8. Date this patch was last updated by Sun : Nov/08/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
