CVE-2011-1473

OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection, a...

CVE-2011-5094

Mozilla Network Security Services NSS 3.x, with certain settings of the SSLENABLERENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service CPU consumption by...

Design/Logic Flaw

DISPUTED Mozilla Network Security Services NSS 3.x, with certain settings of the SSLENABLERENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service CPU consumption ...

CVE-2011-1473

OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection, a...

CVE-2011-5094

CVE-2011-5094 : Mozilla NSS 3.x, when SSL_ENABLE_RENEGOTIATION is set in certain ways, does not properly restrict client-initiated renegotiation within SSL/TLS. This can allow a remote attacker to induce repeated renegotiations on a single connection, causing CPU exhaustion and a potential denial...

CVE-2011-5094

Mozilla Network Security Services NSS 3.x, with certain settings of the SSLENABLERENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service CPU consumption by...

CVE-2011-1473

Technical details about CVE-2011-1473 are not publicly provided in the provided documents. Monitor for updates and refer to the initial description for the general renegotiation risk context.

PT-2012-2072

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.x Description The issue is related to the SSL ENABLE RENEGOTIATION option in certain settings, which does not properly restrict client-initiated renegotiation within the SSL and TLS protocols...

PT-2012-1524

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8l OpenSSL versions 0.9.8m through 1.x Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by performing many renegotiations within a single connection. This i...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 7036)

IBM Java 1.4.2 was updated to version U13 FP 4 iFixes to fix the SSL renegotiation flaw reported as CVE-2009-3555, as well as SAP installer related bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Apache2 (ZYPP Patch Number 7882)

This update fixes several security issues in the Apache2 webserver. - This update also includes several fixes for a modproxy reverse exposure via RewriteRule or ProxyPassMatch directives. CVE-2011-3639 / CVE-2011-3368 / CVE-2011-4317 - Fixed the SSL renegotiation DoS by disabling renegotiation by...

SuSE 11.1 Security Update : Apache2 (SAT Patch Number 5482)

This update fixes several security issues in the Apache2 webserver. - This update also includes several fixes for a modproxy reverse exposure via RewriteRule or ProxyPassMatch directives. CVE-2011-3639 / CVE-2011-3368 / CVE-2011-4317 - Fixed the SSL renegotiation DoS by disabling renegotiation by...

Attack Tool Released to Exploit SSL DoS Issue

A group of researchers has released a tool that they say implements a denial-of-service attack against SSL servers by triggering a huge number of SSL renegotiations, eventually consuming all of the server’s resources and making it unavailable. The tool exploits a widely known issue with the way...

The Hacker's Choice releases SSL DOS Tool

The Hacker's Choice releases SSL DOS Tool German hacker group "The Hacker's Choice" officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet. Establishing a secure SSL connection requires 15x more processingpower on the server than on the...

The Hacker's Choice releases SSL DOS Tool

The Hacker's Choice releases SSL DOS Tool German hacker group "The Hacker's Choice" officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet. Establishing a secure SSL connection requires 15x more processingpower on the server than on the...

CentOS Update for nspr CESA-2010:0165 centos5 i386

Check for the Version of nspr OpenVAS Vulnerability Test CentOS Update for nspr CESA-2010:0165 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for openssl097a CESA-2010:0164 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for gnutls CESA-2010:0166 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for java CESA-2010:0339 centos5 i386

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2010:0339 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for httpd CESA-2009:1580 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...