PT-2015-6117 · Libreswan +4 · Libreswan +4

Name of the Vulnerable Software and Affected Versions: libreswan versions prior to 3.15 Openswan versions prior to 2.6.45 Description: The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon restart. This occurs when a zero DH g^x value is...

Fewer IPsec VPN Connections at Risk to Weak Diffie-Hellman

A challenge has been made against one of the conclusions in a potentially blockbuster academic paper on cryptographic weaknesses that may be the open door through which intelligence agencies are breaking encrypted connections. The paper, “Imperfect Forward Secrecy: How Diffie-Hellman Fails in...

Cisco Adaptive Security Appliance Denial of Service Vulnerability (CNVD-2015-06865)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. The Cisco Adaptive Security Appliance ASA has a security vulnerability in the IKEv1 implementation. A remote attacker could cau...

PT-2015-7181 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 7.2 through 9.3 before 9.33 Cisco Adaptive Security Appliance ASA software version 8.2 before 8.25.58 Cisco Adaptive Security Appliance ASA software version 8.3 before 8.47.29 Cisco...

The vulnerability of the Mac OS X operating system, which allows a hacker to compromise security of information.

The vulnerability of the TLS protocol implementation in the Mac OS X operating system is related to errors in the key exchange process. Exploiting this vulnerability can allow a malicious actor to compromise information security remotely...

PT-2015-2972 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.45 and earlier MySQL Server versions 5.6.26 and earlier wolfSSL versions prior to 3.6.8 Description: The issue is related to errors in the code of the MySQL Server component, specifically in the encryption system. It...

CVE-2015-5887

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data...

Design/Logic Flaw

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data...

CVE-2015-5887

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data...

Apple OS X Certificate Display Handling Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X Secure Transport accepts a CertificateRequest message before a ServerKeyExchange message, which can be exploited by a remote attacker to restrict a certificate before it can be authenticated...

IKEView.exe Stack Buffer Overflow Vulnerability

IKEView.exe is a tool for checking Internet private key exchange in firewall packets. IKEView.exe does not perform proper boundary checks on user-submitted inputs, allowing an attacker to exploit the vulnerability to execute arbitrary code or conduct denial-of-service attacks...

IKEView.exe Fox beta 1 - Stack Buffer Overflow Vulnerability

IKEView.exe is vulnerable to local stack based buffer overflow when parsing an malicious internet key exchange ".elg" file. + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-CPIKEVIEW-0911.txt Vendor: ================================...

IKEView.exe R60 - Stack Buffer Overflow (PoC)

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-IKEVIEWR60-0914.txt Vendor: ================================ www.checkpoint.com http://pingtool.org/downloads/IKEView.exe Product: ==================================================...

IKEView.exe Fox Beta 1 - Stack Buffer Overflow (PoC)

IKEView.exe Fox Beta 1 - Stack Buffer Overflow PoC + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-CPIKEVIEW-0911.txt Vendor: ================================ www.checkpoint.com Product: ================================ IKEView.exe...

Amazon Linux: Security Advisory (ALAS-2015-569)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)

It was found that NSS permitted skipping of the ServerKeyExchange packet during a handshake involving ECDHE Elliptic Curve Diffie-Hellman key Exchange. A remote attacker could use this flaw to bypass the forward-secrecy of a TLS/SSL connection...

Denial of Service Vulnerability in Multiple EMC RSA Products

EMC RSA BSAFE Micro Edition Suite MES and others are products of EMC Corporation.EMC RSA BSAFE is a security software product that supports cryptographic algorithms, certificate chain validation, and Transport Layer Security TLS encryption suites, among other things, to help users achieve a wide...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the ssl3getclientkeyexchange function in the OpenSSL library exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause a service failure by sending a ClientKeyExchange message of zero length during authentication procedures...

CentOS Update for java CESA-2015:1526 centos7

Check the version of java SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882237";...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall allows attackers to bypass the authentication process.

The vulnerability of the IKEv1 protocol implementation of the Cisco Adaptive Security Appliance is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures using specially crafted IKEv1 packets...