3575 matches found
OpenSSL < 0.9.6j / 0.9.7b Multiple Vulnerabilities
According to its banner, the remote host is using a version of OpenSSL older than 0.9.6j or 0.9.7b. This version is vulnerable to a timing-based attack that could allow an attacker to guess the content of fixed data blocks and may eventually be able to guess the value of the private RSA key of th...
kgpg uncrypted private key
Passphrase not used if keys are generated through wizard...
Signed content spoofing in ECDSA
Standard allows to generate private key in a way it will produce same signature for 2 different documents...
GOST 34.10/GOST 34.19 digital signature weakness
There is a weakness leading to ability to create "universal" signature without having a key. Also, it's possible to spoof content in case more than one key is allowed. It's also possible to deliberately create "weak" signature which will lead to private key compromise...
CVE-2001-0381
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key...
SSH1 may generate weak passphrase when using Secure RPC
Overview The secure-RPC feature of the SSH1 client in Solaris sometimes encrypts the SSH private key file with a weak passphrase, which can be determined by an attacker and used to recover the SSH private keys. Other versions of the SSH client running on non-Solaris platforms are not affected by...
CVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file...
GNU Privacy Guard 1.0.x - Format String
GNU Privacy Guard 1.0.x - Format String source: https://www.securityfocus.com/bid/2797/info GnuPG is a popular open source public/private key encryption system. It is possible for attackers to create an encrypted document that will exploit a format string vulnerability in the GnuPG client when th...
CVE-2001-0381
The CVE-2001-0381 entry describes a vulnerability in the OpenPGP/PGP standard where an attacker can determine the private signature key through a cryptanalytic attack that involves modifying the encrypted private key file and then signing a single message. The available documents identify the aff...
CVE-2001-0381
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key...
Bug in SSH1 secure-RPC support can expose users' private keys
Hello all, There is a bug in SSH-1.2.30 involving Secure RPC. The patch for this is available at http://www.ssh.com/patches.html. The explanation and bug was submitted by Richard Silverman [email protected], and his explanation of the bug is below. The SSH1 protocol is not formally supported by SSH...
Уязвимость в алгоритме импорта токенов
Генерация токенов легко восстанаваливается по файлу импорта закрытого ключа .asc...
ssh-1.2.27-exploit.txt
Ok, here is the exploit for SSH-1.2.27 compiled with RSAREF2. It was tested against sshd running on Linux Redhat 6.0 and OpenBSD 2.6, from a Linux Redhat 6.0 box. Since its a modified ssh client, i will just send the diffs against an unpatched ssh-1.2.27 distribution. and i'll try to explain what...
alibaba.2.0.genkey.txt
Date: Fri, 21 May 1999 14:39:00 GMT From: [email protected] Chris Cowley Subject: Vulnerability in Windows SSL server and common browsers Some time ago, I downloaded a trial version of an SSL web server product for Windows NT called 'Alibaba 2.0' for evaluation as a possible SSL solution. I...
DUO-PSA-2020-004: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2020-004 CVE: CVE-2020-3483 Publication Date: 2020-08-13 Revision Date: 2020-08-13 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with the Duo Network Gateway DNG product in which some customer-provid...