10192 matches found
PT-2012-5517
Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance versions 2.7.x through 3.x before 3.2.1 Description The issue allows local users to bypass intended access restrictions via a brute-force attack because the software does not properly restrict the numb...
EMC RSA Data Protection Manager security vulnerabilities
Crossite scripting, restrictions bypass...
ESA-2012-055: RSA® Data Protection Manager Multiple Vulnerabilities
ESA-2012-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-055: RSA® Data Protection Manager Multiple Vulnerabilities EMC Identifier: ESA-2012-055 CVE Identifier: CVE-2012-4612, CVE-2012-4613 Severity Rating: See below for individual scores and refer vendor advisories for component...
ESA-2012-029: RSA BSAFE(r) SSL-C Multiple Vulnerabilities
ESA-2012-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2012-029 CVE Identifier: CVE-2011-3389, CVE-2012-2110, CVE-2012-2131 Severity Rating: See below for scores for individual issues Affected Products: All versio...
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
ESA-2012-032.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST Browser Exploit Against SSL/TLS attacks EMC Identifier: ESA-2012-032 CVE Identifier: CVE-2011-3389 Severity Rating: CVSS v2 Base Score: 4.3...
RSA BSAFE security vulnerabilities
BEAST attacks, buffer overflows...
New windows malware can target smart cards for full remote access
If you think that having a USB Token Smartcard is extremely secure for Digital signatures or other activities, you may be wrong! The research done by Paul Rascagneres can remotely give access to victims smartcard! What makes the attack unique is it uses a keylogger to get the PIN or password and...
RSA Adaptive Authentication information leakage
No description provided...
ESA-2012-035: RSAR Adaptive Authentication (On-Premise) Information Disclosure Vulnerability
ESA-2012-035.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-035: RSA® Adaptive Authentication On-Premise Information Disclosure Vulnerability EMC Identifier: ESA-2012-035 CVE Identifier: CVE-2012-2286 Severity Rating: CVSS v2 Base Score: 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C Affected Product...
RuggedCom RuggedOS Known Hardcoded SSL RSA Private Key
Binary data scadaruggedosknownsslprivatekey.nbin...
Code injection
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2012-2286
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2012-2286
CVE-2012-2286 affects RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 prior to SP3 P3. The issue is described as an information disclosure vulnerability that could occur when calling specific components within the application. The connected advisory (ESA-2012-035) notes a fix in SP3 P3 for ...
CVE-2012-2286
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2012-2286: Undefined Security Weakness
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...
PT-2012-3925
Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise AAOP versions 6.0.2.1 before SP3 P3 Description The issue allows remote attackers to obtain sensitive information. Recommendations For versions 6.0.2.1 before SP3 P3, update to a version that includes...
MS KB2661254: Update For Minimum Certificate Key Length
The remote host is missing Microsoft KB2661254. This update restricts the use of RSA keys less than 1024 bits in length. Keys of shorter lengths are more susceptible to brute-force attacks, which could allow a man-in-the-middle attacker to intercept and/or modify data encrypted over SSL/TLS. C...
Microsoft Patches Critical Word Flaw; Certificate Key Length Changes are Official
Microsoft rolled out seven security updates today, including a fix for a critical remotely exploitable Word vulnerability. In all, 20 vulnerabilities were repaired by Microsoft, which also issued an advisory regarding poorly generated digital certificates that have to be replaced and the...
ESA-2012-037: RSA(r) Authentication Agent 7.1 for Microsoft Windows(r) and RSA(r) Authentication Client 3.5 Access Control Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-037: RSA® Authentication Agent 7.1 for Microsoft Windows® and RSA® Authentication Client 3.5 Access Control Vulnerability EMC Identifier: ESA-2012-037 CVE Identifier: CVE-2012-2287 Severity Rating: CCVSS v2 Base Score: 6.5...