[Full-disclosure] [CIRT.DK - Advisory] Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module

ID: NOVL102200 Domain: primus Solution Class: Novell Fact: Novell iManager 2.02 Fact: Apache 2.0.48 Fact: OpenSSL 0.9.7 Symptom: OpenSSL ASN.1 Parsing vulnerability in Apache Symptom: Server stops responding and an error occurs Cause: Multiple vulnerabilities were reported in the ASN.1 parsing co...

CVE-2005-1935

Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library MSASN1.DLL allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as...

CVE-2005-1935

Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library MSASN1.DLL allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as...

CVE-2005-1935: Undefined Security Weakness

Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library MSASN1.DLL allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as...

CVE-2005-1247

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability...

CVE-2005-1247

Affected software: Novell Nsure Audit 1.0.1 (webadmin.exe). Vulnerable component: ASN.1/SSL handling when processing client certificates to an SSL server. Root cause: malformed ASN.1 packets trigger a denial of service (as demonstrated via an OpenSSL ASN.1 parsing vulnerability). No remediation d...

CVE-2005-1247: Undefined Security Weakness

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability...

CVE-2003-1005

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...

CVE-2003-1005

CVE-2003-1005 affects Mac OS X 10.2.8 and 10.3.2 PKI functionality. The vulnerability allows remote attackers to cause a denial of service (service crash) by sending malformed ASN.1 sequences. Exploitation is indicated as network-based with low complexity and no authentication required, resulting...

CVE-2003-1005: Undefined Security Weakness

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...

HP-UX PHNE_31726 : HP-UX Running BIND v920, Remote Denial of Service (DoS) (HPSBUX00290 SSRT3622 rev.5)

s700800 11.23 Bind 9.2.0 components : 1. Certain ASN.1 encodings that are rejected as invalid by the parser can trigger a bug in the deallocation of the corresponding data structure, corrupting the stack. This can be used as a denial of service attack. It is currently unknown whether this can be...

CVE-2004-2645

Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."...

CVE-2004-2644

Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags...

USN-19-1: squid vulnerabilities

Recently, two Denial of Service vulnerabilities have been discovered in squid, a WWW proxy cache. Insufficient input validation in the NTLM authentication handler allowed a remote attacker to crash the service by sending a specially crafted NTLMSSP packet. Likewise, due to an insufficient...

ASN.1 compiler multiple bugs

No description provided...

[SA12794] The ASN.1 Compiler Unspecified Security Issues

TITLE: The ASN.1 Compiler Unspecified Security Issues SECUNIA ADVISORY ID: SA12794 VERIFY ADVISORY: http://secunia.com/advisories/12794/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: The ASN.1 Compiler 0.x http://secunia.com/product/4038/ DESCRIPTION: Two security...

squid SNMP DoS

ASN.1 parsing problems...

Squid < 2.5.STABLE7 SNMP ASN.1 Parser Remote DoS

Binary data 2363.prm...

Debian DSA-111-1 : ucd-snmp - remote exploit

The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The...

Debian DSA-394-1 : openssl095 - ASN.1 parsing vulnerability

Steve Henson of the OpenSSL core team identified and prepared fixes for a number of vulnerabilities in the OpenSSL ASN1 code that were discovered after running a test suite by British National Infrastructure Security Coordination Centre NISCC. A bug in OpenSSLs SSL/TLS protocol was also identifie...