971 matches found
Vulnerability in OpenSSL CVE-2003-0147
RSA blinding was not enabled by default, which could allow local and remote attackers to obtain a server’s private key by determining factors using timing differences on 1 the number of extra reductions during Montgomery reduction, and 2 the use of different integer multiplication algorithms...
OpenSSL < 0.9.6j / 0.9.7b Multiple Vulnerabilities
According to its banner, the remote host is using a version of OpenSSL older than 0.9.6j or 0.9.7b. This version is vulnerable to a timing-based attack that could allow an attacker to guess the content of fixed data blocks and may eventually be able to guess the value of the private RSA key of th...
CVE-2002-0214
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP Wired Equivalent Privacy key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key...
Ключ в открытом тексте в драйверах Intel WLAN (Weak encryption)
WEP-Key хранится в реестре в открытом виде...
Проблемы с беспроводными устройствами (SNMP authentication flaw, Wired-side SNMP key exposure)
Возможно несанкционированное подключение по 802.11...
ISSalert: ISS Advisory: Wired-side SNMP key exposure in 802.11b Access Points
Internet Security Systems Security Advisory June 20, 2001 Wired-side SNMP WEP key exposure in 802.11b Access Points Synopsis: Internet Security Systems ISS X-Force has discovered a vulnerability in several 802.11b Access Point devices. This problem may reveal the Wired Equivalent Privacy WEP key...
Дырки в Orinoco (WEP key exposure)
По-умолчанию используется легко обнаруживаемый ключ...
Bug in SSH1 secure-RPC support can expose users' private keys
Hello all, There is a bug in SSH-1.2.30 involving Secure RPC. The patch for this is available at http://www.ssh.com/patches.html. The explanation and bug was submitted by Richard Silverman [email protected], and his explanation of the bug is below. The SSH1 protocol is not formally supported by SSH...
SSH 1.2.x - Secure-RPC Weak Encrypted Authentication
SSH 1.2.x - Secure-RPC Weak Encrypted Authentication // source: https://www.securityfocus.com/bid/2222/info SSH is a package designed to encrypt traffic between two end points using the IETF specified SSH protocol. The SSH1 package is distributed and maintained by SSH Communications Security. A...
DUO-PSA-2020-004: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2020-004 CVE: CVE-2020-3483 Publication Date: 2020-08-13 Revision Date: 2020-08-13 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with the Duo Network Gateway DNG product in which some customer-provid...
DUO-PSA-2015-001: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2015-001 Original Publication Date: 2015-02-03 Revision Date: 2015-02-10 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified an issue in certain versions of the Duo Web SDK that could allow attackers to bypass prima...