132 matches found
CVE-2012-2388
The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a 1 empty or 2 zeroed RSA signature, aka "RSA signature verification vulnerability."...
CVE-2012-2388
The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a 1 empty or 2 zeroed RSA signature, aka "RSA signature verification vulnerability."...
CVE-2012-2388: Improper Authentication
The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a 1 empty or 2 zeroed RSA signature, aka "RSA signature verification vulnerability."...
update for strongswan (important)
Strongswan's gmp plugin could treat empty RSA signature as valid ones...
SuSE 10 Security Update : strongswan (ZYPP Patch Number 8138)
This update fixed a security issue in strongswan's 'gmp' plugin which could be exploited by attackers to forge RSA signature/certificate to authenticate as any legitimate user. CVE-2012-2388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
strongswan authentication bypass
Invalid authentication data check if gmp plugin is used...
Security fix for the ALT Linux 6 package strongswan version 4.6.4-alt1
June 1, 2012 Michael Shigorin 4.6.4-alt1 - 4.6.4 + CVE-2012-2388 is fixed an attacker presenting a forged signature and/or certificate can authenticate as any legitimate user provided that "gmp" plugin is in use and a connection definition using RSA auth exists...
Security fix for the ALT Linux 7 package strongswan version 4.6.4-alt1
June 1, 2012 Michael Shigorin 4.6.4-alt1 - 4.6.4 + CVE-2012-2388 is fixed an attacker presenting a forged signature and/or certificate can authenticate as any legitimate user provided that "gmp" plugin is in use and a connection definition using RSA auth exists...
Debian Security Advisory DSA 2483-1 (strongswan)
The remote host is missing an update to strongswan announced via advisory DSA 2483-1. OpenVAS Vulnerability Test $Id: deb24831.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2483-1 strongswan Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
DSA-2483-1 strongswan - authentication bypass
Bulletin has no description...
Debian: Security Advisory (DSA-2483-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...