RSA BSAFE security vulnerabilities

BEAST attacks, buffer overflows...

ESA-2012-029: RSA BSAFE(r) SSL-C Multiple Vulnerabilities

ESA-2012-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2012-029 CVE Identifier: CVE-2011-3389, CVE-2012-2110, CVE-2012-2131 Severity Rating: See below for scores for individual issues Affected Products: All versio...

ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks

ESA-2012-032.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST Browser Exploit Against SSL/TLS attacks EMC Identifier: ESA-2012-032 CVE Identifier: CVE-2011-3389 Severity Rating: CVSS v2 Base Score: 4.3...

New windows malware can target smart cards for full remote access

If you think that having a USB Token Smartcard is extremely secure for Digital signatures or other activities, you may be wrong! The research done by Paul Rascagneres can remotely give access to victims smartcard! What makes the attack unique is it uses a keylogger to get the PIN or password and...

ESA-2012-035: RSAR Adaptive Authentication (On-Premise) Information Disclosure Vulnerability

ESA-2012-035.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-035: RSA® Adaptive Authentication On-Premise Information Disclosure Vulnerability EMC Identifier: ESA-2012-035 CVE Identifier: CVE-2012-2286 Severity Rating: CVSS v2 Base Score: 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C Affected Product...

RSA Adaptive Authentication information leakage

No description provided...

RuggedCom RuggedOS Known Hardcoded SSL RSA Private Key

Binary data scadaruggedosknownsslprivatekey.nbin...

CVE-2012-2286

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2286

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2286

CVE-2012-2286 affects RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 prior to SP3 P3. The issue is described as an information disclosure vulnerability that could occur when calling specific components within the application. The connected advisory (ESA-2012-035) notes a fix in SP3 P3 for ...

MS KB2661254: Update For Minimum Certificate Key Length

The remote host is missing Microsoft KB2661254. This update restricts the use of RSA keys less than 1024 bits in length. Keys of shorter lengths are more susceptible to brute-force attacks, which could allow a man-in-the-middle attacker to intercept and/or modify data encrypted over SSL/TLS. C...

Microsoft Patches Critical Word Flaw; Certificate Key Length Changes are Official

Microsoft rolled out seven security updates today, including a fix for a critical remotely exploitable Word vulnerability. In all, 20 vulnerabilities were repaired by Microsoft, which also issued an advisory regarding poorly generated digital certificates that have to be replaced and the...

ESA-2012-037: RSA(r) Authentication Agent 7.1 for Microsoft Windows(r) and RSA(r) Authentication Client 3.5 Access Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-037: RSA® Authentication Agent 7.1 for Microsoft Windows® and RSA® Authentication Client 3.5 Access Control Vulnerability EMC Identifier: ESA-2012-037 CVE Identifier: CVE-2012-2287 Severity Rating: CCVSS v2 Base Score: 6.5...

RSA SecurID Authentication Agent / RSA Authentication Client protection bypass

Under some condition user may login with windows credentials only...

RSA Authentication Client 3.5 < 3.5.6 Local Authentication Bypass

RSA Authentication Client, an authentication client from RSA Security, is installed on the remote Windows host. The installed version of RSA Authentication Client 3.5 is earlier than 3.5.6 and is, therefore, potentially affected by an authentication bypass vulnerability. Under certain...

New Zero-Day Vulnerability Found in Java 5, 6 and 7; 1.1 Billion Desktops Affected

Just when you thought it was safe to go back to using Java, security researchers have found another gaping hole that could impact potentially more than 1.1 billion desktops running the Oracle-owned platform. A critical vulnerability in all of the latest versions of Java SE software was discovered...

Design/Logic Flaw

IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2012-2187

IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2012-2187

CVE-2012-2187 affects IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 (versions 1.13 and earlier). The root cause is weak RSA key generation in the firmware, which may allow an attacker to remotely compromise the corresponding private key when using secure proto...