IPsec configurations may be vulnerable to information disclosure

Overview The IPsec Encapsulating Security Payload protocol used in tunneling mode may be vulnerable to multiple attacks when confidentiality mode is used without integrity protection, or in certain cases where integrity protection is provided by higher-level protocols. Description The IP Security...

PT-2004-2007 · Paul'S Ppp · Ppp

Name of the Vulnerable Software and Affected Versions: ppp version 2.4.1 Description: The issue is caused by an integer underflow in the cbcp.c file of the pppd application, allowing remote attackers to cause a denial of service by crashing the daemon. This is achieved by sending a CBCP packet wi...

SSH < 1.2.25 CBC/CFB Data Stream Injection

Binary data 1978.prm...

Moderate: Red Hat Security Advisory: openssl security update

Updated OpenSSL packages are available that fix a potential timing-based attack. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS OpenSSL is a commercial-grade, full-featured, open source toolkit which implements the Secure Sockets Layer SSL v2/...

[SECURITY] [DSA 253-1] New OpenSSL packages fix timing-based attack vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 253-1 [email protected] http://www.debian.org/security/ Martin Schulze February 24th, 2003 http://www.debian.org/security/faq -...

DSA-253 openssl - information leak

Bulletin has no description...

OpenSSL 0.9.7a and 0.9.6i released

From the changelog: Security fix: Vaudenay timing attack on CBC + In ssl3getrecord ssl/s3pkt.c, minimize information leaked + via timing by performing a MAC computation even if incorrrect + block cipher padding has been found. This is a countermeasure + against active attacks where the attacker h...

OpenSSL 0.9.x - CBC Error Information Leakage

source: https://www.securityfocus.com/bid/6884/info A side-channel attack against implementations of SSL exists that, through analysis of the timing of certain operations, can reveal sensitive information to an active adversary. This information leaked by vulnerable implementations is reportedly...

CVE-1999-1085: Undefined Security Weakness

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...