531 matches found
CVE-2011-1945: Undefined Security Weakness
The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...
CVE-2010-0928: Undefined Security Weakness
OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...
CVE-2009-3628: Exposure of Sensitive Information to an Unauthorized Actor
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a ttcontent form element...
CVE-2004-2721: Undefined Security Weakness
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages...
Willing Webcam 2.8 Licence Info Disclosure Local Exploit
Exploit for unknown platform in category local exploits ======================================================== Willing Webcam 2.8 Licence Info Disclosure Local Exploit ======================================================== / Willing Webcam 2.8 licence info disclosure local exploit by Kozan...
Tectia SSH Server < 4.3.2 Local Key Disclosure
Binary data 3043.prm...
CVE-2003-1120
The CVE-2003-1120 entry concerns SSH Tectia Server 4.0.3 and 4.0.4 on Unix where the password-change plugin (ssh-passwd-plugin) is enabled. The vulnerability is a race condition that allows local users to obtain the server’s private key. The connected documents confirm the affected product and th...
CVE-2003-0971
GnuPG GPG 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 sign+encrypt keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature...
CVE-2003-0971: Undefined Security Weakness
GnuPG GPG 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 sign+encrypt keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature...
CVE-1999-0151
CVE-1999-0151 corresponds to the SATAN tool vulnerability where the session key can be disclosed if the user navigates the browser to other sites, potentially enabling root access. Connected sources confirm the issue affects SATAN and describe the risk of session key disclosure leading to elevate...