60 matches found
Fedora Update for python-crypto FEDORA-2018-913c225b49
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1283-2 : python-crypto security update
This is an update to DLA-1283-1. In DLA-1283-1 it is claimed that the issue described in CVE-2018-6594 is fixed. It turns out that the fix is partial and upstream has decided not to fix the issue as it would break compatibility and that ElGamal encryption was not intended to work on its own. The...
CVE-2018-6594
lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data i.e., it does not have semantic security in face of a ciphertext-only attack. The Decisional Diffie-Hellman DDH...
CVE-2018-6594
lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data i.e., it does not have semantic security in face of a ciphertext-only attack. The Decisional Diffie-Hellman DDH...
CVE-2018-6594
CVE-2018-6594 affects PyCrypto before or up to 2.6.1 due to weak ElGamal key parameter generation in lib/Crypto/PublicKey/ElGamal.py. This flaw breaks semantic security: under ciphertext-only attack an adversary could obtain plaintext information from ciphertext, as the Decisional Diffie-Hellman ...
CVE-2017-6594
The CVE-2017-6594 issue affects the Heimdal Kerberos 5 implementation: the transit path validation code before 7.3 may bypass the capath policy by failing to add the previous hop realm to the transit path of issued tickets. This could allow attackers to bypass capath protections (impact described...
openSUSE Security Update : libheimdal (openSUSE-2017-937) (Orpheus' Lyre)
This update for libheimdal fixes the following issues : - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation. This is a critical vulnerability. In krb5extractticket the KDC-REP service name must be obtained from encrypted version stored in 'encpart' instead of the unencrypted versi...
CVE-2016-6594
The CVE-2016-6594 entry affects Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, and ProxySG 6.5/6.6. Description details a Security Control Bypass: when server hostname is unavailable, the products perform a reverse DNS (RDNS) lookup on the server IP to resolve a hostname. Depending on poli...
CVE-2013-6594
CVE-2013-6594 is rejected/not used; this candidate does not represent an active vulnerability entry.
heimdal -- bypass of capath policy
Viktor Dukhovni reports: Commit f469fc6 2010-10-02 inadvertently caused the previous hop realm to not be added to the transit path of issued tickets. This may, in some cases, enable bypass of capath policy in Heimdal versions 1.5 through 7.2. Note, this may break sites that rely on the bug. With...
SA130 : Security Control Bypass Vulnerability in ProxySG, ASG, and CacheFlow
SUMMARY Some HTTP and HTTPS requests may trigger reverse DNS RDNS lookups in ProxySG, ASG, and CacheFlow. When these products are configured with policy rules that use hostnames from RDNS lookup results, such requests may bypass security controls such as blocking a request, requiring user...
CVE-2014-6594
CVE-2014-6594 applies to Oracle iLearning (6.0/6.1) with the Learner Pages subcomponent. The vulnerability is described as unspecified and allows remote attackers to affect confidentiality via unknown vectors related to Learner Pages. The connected documents provide limited concrete details beyon...
Palo Alto Networks PAN-OS < 3.1.11 / 4.0.x < 4.0.8 / 4.1.x < 4.1.1 Command Injection
The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.11 / 4.0.8 / 4.1.1. It is, therefore, affected by a command injection vulnerability that allows an authenticated user to inject arbitrary shell commands via the CLI. C Tenable Network Security, Inc. include"compat.inc"...
CVE-2012-6594
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299...
CVE-2012-6594
The CVE-2012-6594 issue affects Palo Alto Networks PAN-OS: PAN-OS versions prior to 3.1.11, 4.0.x prior to 4.0.8, and 4.1.x prior to 4.1.1 are vulnerable. The device-management CLI allows an authenticated, remote administrator to inject arbitrary shell commands via unspecified vectors. This can l...
CVE-2008-6594
SQL injection vulnerability in the cmrdfexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6594
The CVE concerns TYPO3, specifically the cm_rdfexport extension, where a SQL injection vulnerability could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Technical details across connected sources confirm the affected component and the underlying issue (unspecif...
CVE-2008-4366
creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6594...
CVE-2006-6594
SQL injection vulnerability in utilities/usermessages.asp of ScriptMate User Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the mesid parameter. Affected: ScriptMate User Manager 2.0; root cause: improper input handling in mesid. Impact and exploitation details are prov...