390 matches found
LibreOffice OpenSSL TLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 LibreOffice是一套可与其他主要办公室软体相容的套件，可在各种平台上执行。 LibreOffice所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 LibreOffice 4.x LibreOffice 4.2.3版本已修复该漏洞，建议用户下载使用： http://www.libreoffice.org/...
Sophos Antivirus for vShield OpenSSL TLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 Sophos Antivirus是一款防病毒应用程序。 Sophos Antivirus for vShield所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Sophos Antivirus for vShield 1.0 Sophos Antivirus for vShield 1.1 目前没有详细解决方案： http://www.sophos.com...
F-Secure E-mail/Server Security OpenSSL TLS/DTLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 F-Secure E-mail/Server Security/F-Secure Server Security产品存在安全漏洞。 F-Secure E-mail/Server Security/F-Secure Server Security所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 F-Secure E-mail and Server Security 10.x F-Secure E-mail...
HP多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 HP多个产品存在安全漏洞。 HP多个产品所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 HP Onboard Administrator 4.x HP AssetManager 9.x HP Diagnostics 9.x HP IT Executive Scorecard 9.x HP LoadRunner 11.x HP LoadRunner 12.x HP OpenView Connect-It...
VMware多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 VMware多个产品存在安全漏洞。 VMware多个产品所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Nicira Network Virtualization Platform NVP 3.x VMware ESXi 5.x VMware NSX 4.x VMware NSX 6.x VMware Fusion 6.x Vmware Horizon Mirage 4.x VMware Horizo...
Barracuda多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 Barracuda多个产品存在安全漏洞。 Barracuda所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Barracuda CudaTel Communication Server 2.x Barracuda CudaTel Communication Server 3.x Barracuda Firewall 6.x Barracuda Link Balancer 2.x Barracuda...
KLA10080 OSI vulnerability in AusweisApp
The HeartBleed vulnerability was found in AusweisApp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited from the network. Original advisories AusweisApp versions changelog Related products AusweisApp CVE list Solution Update to...
Exploit for Out-of-bounds Read in Openssl
The Heartbleed test server. With caching by Mozilla. Install th...
Exploit for Out-of-bounds Read in Openssl
OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, dat...
Blue Coat ProxySG Heartbeat Information Disclosure (Heartbleed)
The remote Blue Coat ProxySG device's SGOS self-reported version is 6.5.3.x prior to 6.5.3.6. It is, therefore, potentially affected by an information disclosure vulnerability. An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that cou...
Fedora 20 : mingw-openssl-1.0.1e-6.fc20 (2014-4982) (Heartbleed)
Fixes CVE-2014-0160 RHBZ 1085066 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
HeartBleed Bug Explained - 10 Most Frequently Asked Questions
Heartbleed – I think now it’s not a new name for you, as every informational website, Media and Security researchers are talking about probably the biggest Internet vulnerability in recent history. It is a critical bug in the OpenSSL's implementation of the TLS/DTLS heartbeat extension that allow...
Heartbleed OpenSSL Bug Exploited to Steal Private SSL Keys
Heartbleed went from a dangerous Internet-wide vulnerability over the weekend to one with real exploits, real victims and real problems for private SSL server keys. Mumsnet, a U.K.-based parenting website, said it was victimized by hackers exploiting the vulnerability in OpenSSL to steal password...
VMware product updates address OpenSSL security vulnerabilities
a. Information Disclosure vulnerability in OpenSSL third party library The OpenSSL library is updated to version openssl-1.0.1g to resolve multiple security issuesThe Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2014-0076 and CVE-2014-0160 to these issues...
OpenVPN Heartbeat Information Disclosure (Heartbleed)
Based on its response to a TLS request with a specially crafted heartbeat message RFC 6520, the remote OpenVPN service appears to be affected by an out-of-bounds read flaw. Because the remote OpenVPN service does not employ the 'HMAC Firewall' feature, this vulnerability can be exploited without...
Obama Lets NSA Use Zero-Day Exploits by labeling it as 'National Security Need'
On Saturday, the Senior Administration Officials cast light on the subject of Internet Security and said President Obama has clearly decided that whenever the U.S. Intelligence agency like NSA discovers major vulnerabilities, in most of the situations the agency should reveal them rather than...
Billions of Smartphone Users affected by Heartbleed Vulnerability
Heartbleed has left a worst impression worldwide affecting millions of websites and is also supposed to put millions of Smartphones and tablets users at a great risk. Heartbleed is a critical bug CVE-2014-0160 in the popular OpenSSL cryptographic software library, that actually resides in the...
Rising OpenSSL（CVE-2 0 1 4-0 1 6 0）vulnerability analysis report-vulnerability warning-the black bar safety net
1. CVE-2 0 1 4-0 1 6 0 vulnerability background 2 0 1 4 年 4 月 7, OpenSSL released a security Bulletin, in the OpenSSL1. 0. 1 version there is a serious VulnerabilityCVE-2 0 1 4-0 1 6 to 0. OpenSSL Heartbleed module there is a BUG, the problem exists in the ssl/dlboth. c file in the heartbeat...