MD5 - Message Digest Algorithm Hash Collision

MD5 - Message Digest Algorithm Hash Collision source: https://www.securityfocus.com/bid/11849/info The MD5 algorithm is reported prone to a hash collision weakness. This weakness reportedly allows attackers to create multiple, differing input sources that, when the MD5 algorithm is used, result i...

[OpenCA Advisory] Vulnerabilities in signature verification

OpenCA Security Advisory 28 November 2003 Vulnerabilities in signature validation ======================================= Multiple flaws in OpenCA before version 0.9.1.4 could cause OpenCA to use an incorrect certificate in the chain to determine the serial being checked which could lead to...

CVE-2002-0030

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe...

sendmail 8.12.9 available

-----BEGIN PGP SIGNED MESSAGE----- Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.9. It contains a fix for a critical security problem discovered by Michal Zalewski whom we thank for bringing this problem to our attention. Sendmail urges all users to either...

CVE-2002-0030

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe...

CVE-2002-0030

CVE-2002-0030 is a vulnerability in Adobe Acrobat/Reader plug-ins where the digital signature check only validates the plug-in’s PE header, allowing a malicious unsigned plug-in to be loaded as if signed. This enables local attackers to cause arbitrary code execution when Acrobat/Reader loads a c...

Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 Vulnerability critical: Digital signature for Adobe Acrobat/Reader plug-in can be forged March 24, 2003 SUMMARY =============================================================================== Adobe Acrobat Reader supports plug-ins, i.e. additional...

MacOS X autoupdate weak protection

Digital signature is not checked during update process...

GOST 34.10/GOST 34.19 digital signature weakness

There is a weakness leading to ability to create "universal" signature without having a key. Also, it's possible to spoof content in case more than one key is allowed. It's also possible to deliberately create "weak" signature which will lead to private key compromise...

Lotus Notes R5 clients - no warning for broken signature or encryption

7 Nov 2000 Lotus Notes R5 clients - no warning for broken signature or encryption AFFECTED VERSIONS All R5 client versions up to the latest R5.0.5 PROBLEM DESCRIPTION If you receive a clear signed S/MIME e-mail with a broken signature, e.g. the mail body is modified by a third party during...

Microsoft .NET Framework 3.5 SP1 Security Update for Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB979916)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...

Microsoft .NET Framework 3.5 SP1 Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB979916)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...

Security update 1970-01-01

...

Microsoft .NET Framework 3.5 Security Update for Windows Server 2003 and Windows XP for x64-based Systems (KB982865)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...

Microsoft .NET Framework 3.5 SP1 and Windows Server 2008 SP2 Security Update for Itanium-based Systems (KB979910)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...

Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 Service Pack 2: "Error 1718 File was rejected by digital signature policy"

None None...

Microsoft .NET Framework 1.0 SP3 Security Update for Windows XP Tablet PC and Media Center (KB979904)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...