285 matches found
Hackers can steal Windows Phone passwords using Wi-Fi vulnerability
Microsoft has warned that a vulnerability in Windows Phone operating systems could allow hackers to access your login credentials. The vulnerability resides in a Wi-Fi authentication scheme known as PEAP-MS-CHAPv2, which Windows Phones use to access wireless networks protected by version 2 of the...
[SECURITY] [DSA 2541-1] beaker security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2541-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 07, 2012 http://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-2541-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2541-1 : beaker - information disclosure
It was discovered that Beaker, a cache and session library for Python, when using the python-crypto backend, is vulnerable to information disclosure due to a cryptographic weakness related to the use of the AES cipher in ECB mode. Systems that have the python-pycryptopp package should not be...
[SECURITY] [DSA 2541-1] beaker security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2541-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 07, 2012 http://www.debian.org/security/faq -...
DSA-2541-1 beaker - information disclosure
Bulletin has no description...
PT-2012-2871 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The issue concerns the use of a hardcoded password in the rc4encrypt function, makin...
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2007-207-01)
New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix security issues. The first issue which allows remote attackers to make recursive queries only affects Slackware 12.0. More details about this issue may be found in the Common Vulnerabilities and...
Debian DSA-1946-1 : belpic - cryptographic weakness
It was discovered that belpic, the belgian eID PKCS11 library, does not properly check the result of an OpenSSL function for verifying cryptographic signatures, which could be used to bypass the certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian DSA-1888-1 : openssl, openssl097 - cryptographic weakness
Certificates with MD2 hash signatures are no longer accepted by OpenSSL, since they're no longer considered cryptographically secure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1888...
Apple iPhone cryptographic weakness
Certificate key usage is not checked during validation of .mobileconfig wireless autoconfiguration file...
[SECURITY] [DSA 1946-1] New belpic packages fix cryptographic weakness
------------------------------------------------------------------------ Debian Security Advisory DSA-1946-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 04, 2009 http://www.debian.org/security/faq -...
DSA-1946-1 belpic - cryptographic weakness
Bulletin has no description...
Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200)
Title: Crypto backdoor in Qnap storage devices Date: 18 September 2009 URL: http://www.baseline-security.de/downloads/BSC-QnapCryptoBackdoor-CVE-2009-3200.txt Vendor: QNAP Systems Products verified: TS-239 Pro, TS-639 Pro Products unverified: SS-439 Pro, TS-439 Pro, TS-439U-SP/RP, TS-509 Pro,...
QNAP Systems Encryption Bypass
Title: Crypto backdoor in Qnap storage devices Date: 18 September 2009 URL: http://www.baseline-security.de/downloads/BSC-QnapCryptoBackdoor-CVE-2009-3200.txt Vendor: QNAP Systems Products verified: TS-239 Pro, TS-639 Pro Products unverified: SS-439 Pro, TS-439 Pro, TS-439U-SP/RP, TS-509 Pro,...
[SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures
------------------------------------------------------------------------ Debian Security Advisory DSA-1888-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 15, 2009 http://www.debian.org/security/faq -...
DTSA-185-1 slurm-llnl - cryptographic weakness
Bulletin has no description...
DSA-1703-1 bind9 - cryptographic weakness
Bulletin has no description...