PT-2016-4476

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.8 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.4 Description The issue concerns the client in EMC RSA BSAFE Micro Edition Suite MES that places the weakest...

CVE-2016-0923: Use of a Broken or Risky Cryptographic Algorithm

The client in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging server...

PT-2016-4444

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.1.x before 4.1.5 RSA BSAFE Crypto-C Micro Edition CCME versions 4.0.x through 4.1.x before 4.1.3 RSA BSAFE Crypto-J versions prior to 6.2.1 RSA BSAFE SSL-J versions prior to 6.2.1...

PT-2015-4697

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C versions 2.8.9 and earlier Description The issue allows remote SSL servers to conduct...

CVE-2015-0533: Use of a Broken or Risky Cryptographic Algorithm

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message, a similar issue to CVE-2014-35...

PT-2015-4699

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C version 2.8.9 and earlier Description The issue makes it easier for remote attackers to condu...

PT-2015-4700

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C versions 2.8.9 and earlier Description The issue allows remote attackers to cause a denial of...

PT-2015-4701

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE Crypto-C Micro Edition Crypto-C ME versions prior to 4.0.4 RSA BSAFE Crypto-C Micro Edition Crypto-...

CVE-2015-0537: Integer Underflow (Wrap or Wraparound)

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition Crypto-C ME before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service...

CVE-2015-0536: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allow remote attackers to cause a denial of service daemon crash via a ClientKeyExchange messa...

PT-2015-4698

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE Crypto-J versions prior to 6.2 RSA BSAFE SSL-J versions prior to 6.2 RSA BSAFE SSL-C versions prior...

CVE-2015-0535: Use of a Broken or Risky Cryptographic Algorithm

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, relate...

CVE-2015-0534: Improper Certificate Validation

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based...

CVE-2014-4630: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session...

PT-2014-6036

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.5 RSA BSAFE SSL-J versions prior to 6.1.4 Description The issue allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple...

PT-2014-3731

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 3.2.x through 3.2.5 EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.4 Description The issue is related to the improper validation of X.509 certificate chains, which allows...

CVE-2014-0636: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain...

CVE-2014-0628

The server in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

CVE-2014-0628: Improper Input Validation

The server in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

PT-2014-3724

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x before 4.0.5 Description The server does not properly process certificate chains, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...