CVE-2012-0397

Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2012-0397

The CVE-2012-0397 issue affects RSA SecurID Software Token Converter prior to version 2.6.1. A boundary/buffer overflow in the converter (notably when processing XML-formatted .sdtid strings) can be triggered remotely, potentially causing a denial of service or, in some cases, executing arbitrary...

PT-2012-2541

Name of the Vulnerable Software and Affected Versions EMC RSA SecurID Software Token Converter versions prior to 2.6.1 Description A buffer overflow issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. Recommendations For versions...

CVE-2012-0397: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

Paul Judge on Measuring the Hotness of Security

Dennis Fisher talks with Paul Judge of Barracuda Labs about his new project, which uses data on the vendors and products on display at the RSA Conference to determine which topics and technologies are the hottest at the moment. Podcast audio courtesy of sykboy65 Subscribe to the Digital Undergrou...

RSA 2012: Mobile, Cloud, and Intelligent Control

It was good to catch up with our customers and partners at RSA 2012 this week. Much of the buzz this year was around mobile devices and securing the cloud. We were glad to see innovative organizations introducing compliance-validated architectures based on these emerging technologies. One such...

Microsoft RDP Server Private Key Information Disclosure Vulnerability

Remote Desktop Protocol server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Cryptosystems Showing Signs of 'Wear and Tear'

SAN FRANCISCO– It’s been an interesting year in the cryptography world, with new attacks on several algorithms, continued problems with hash functions and the recent research on weak RSA keys. With all of that as a backdrop, some of the brightest minds in the field, gathered here for the RSA...

RSA: Chaos In the Security World, And the Situation Is Perfect

Right on cue this week, the anarchic hacking collective Anonymous stepped up and grabbed the story line away from the lions of the IT security industry. With the annual RSA Conference set to begin, the whistle blowing site Wikileaks released the first of some five million e-mail messages stolen...

Researchers to Detail WebKit Zero-Day on Android Phones at RSA Conference

Security researchers will be demonstrating an end-to-end phishing attack on Google Android phones that utilizes a zero-day vulnerability in Apple’s WebKit technology at the upcoming RSA Conference. The presentation, slated for Feb. 29, will be a coming-out party of sorts for new security firm...

What You Need to Know About the RSA Key Research

It’s always slightly disorienting and confusing when a story about something as esoteric as weak encryption keys produced by poor random number generators makes its way into the real world and begins scaring the citizens. This can lead to confusion and worry about whether everyone’s online bankin...

Weak RSA Keys Plague Embedded Devices, But Experts Caution Against Panic

If all of the noise about weak RSA keys and compromised cryptosystems in the last few days has done anything, it’s to confirm what many in the cryptography community have known for quite a long time: When it comes to implementing cryptosystems, there are a whole lot of people doing it wrong...

EMC RSA enVision information leakage

It's possible to obtain environment variables values...

ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision Advisories Updated January 25, 2012 Summary: RSA, The Security Division of EMC, announces security fixes to address a security vulnerability and provide an...

Kelihos Botnet Resurfaces

UPDATE–The Kelihos botnet, which researchers at Kaspersky Lab and Microsoft disrupted last fall by sinkholing the control channel, has sprung back to life and is using only slightly different versions of the original malware and controller list. The rejuvenation of the botnet illustrates the...

Information disclosure

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

CVE-2011-4143

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

CVE-2011-4143

Summary of CVE-2011-4143 : Affected product is RSA enVision 4.x (4.0 SP4 P5 and 4.1 before P3). The issue is an environmental variable information disclosure vulnerability that could allow an unauthenticated, remote attacker to obtain sensitive details about the environment variables in the web s...

CVE-2011-4143: Exposure of Sensitive Information to an Unauthorized Actor

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

PT-2012-1812

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 before SP4 P5 EMC RSA enVision versions 4.1 before P3 Description The issue allows remote attackers to obtain sensitive information about environment variables in the web system. Recommendations For versions 4.0...