Security fix for the ALT Linux 10 package gnutls30 version 2.6.3-alt1

Dec. 21, 2008 Afanasov Dmitry 2.6.3-alt1 - 2.6.3 release see NEW for details + Fix chain verification for chains that ends with RSA-MD2 CAs CVE-2008-4989 + Fix memory leak in PSK authentication. + gnutls-cli minor updates - return macroses that updates info's fix repocop warnings...

Security fix for the ALT Linux 9 package gnutls30 version 2.6.3-alt1

Dec. 21, 2008 Afanasov Dmitry 2.6.3-alt1 - 2.6.3 release see NEW for details + Fix chain verification for chains that ends with RSA-MD2 CAs CVE-2008-4989 + Fix memory leak in PSK authentication. + gnutls-cli minor updates - return macroses that updates info's fix repocop warnings...

CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

Level-One WBR-3460A Grants Root Access

Advisory: Level-One WBR-3460A Grants Root Access Risk: High Vendor Status: Vendor has not released an updated version Release Date: 08/01/2008 Last Modified: 01/01/2008 Author: Anastasios Monachos anastasiosmatgmaildotcom I Affected Products: ==================== Level-One WBR-3460A latest firmwa...

levelone-root.txt

Advisory: Level-One WBR-3460A Grants Root Access Risk: High Vendor Status: Vendor has not released an updated version Release Date: 08/01/2008 Last Modified: 01/01/2008 Author: Anastasios Monachos anastasiosmatgmaildotcom I Affected Products: ==================== Level-One WBR-3460A latest firmwa...

CVE-2007-4422

The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key PSK authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2007-4422

CVE-2007-4422 affects Symantec Enterprise Firewall 6.x: the login interface used with a VPN using pre-shared key (PSK) authentication leaks information by returning different responses for valid vs invalid usernames, enabling remote username enumeration. The available connected documents confirm ...

Cain & Abel PSK Sniffer Heap overflow

SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: Cain & Abel PSK Sniffer Heap overflow Release Date: 18/03/2005 Application: Cain & Abel 2.65 Platform: Win32 Severity: Remote Code Execution Author: Gary O'leary-Steele Vendor Status: Fixed 16/03/2005 CVE Candidate: N/A Reference:...