254 matches found
CVE-2014-2522
curl and libcurl 7.27.0 through 7.35.0, when running on Windows and using the SChannel/Winssl TLS backend, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate when accessing a URL that uses a numerical IP...
CURL-CVE-2014-2522 not verifying certs for TLS to IP address / Schannel
When asked to do a TLS connection HTTPS, FTPS, IMAPS, etc to a URL specified with an IP address instead of a name, libcurl would wrongly not verify the server's name in the certificate. The signature whether it was signed by a trusted CA and validity whether the date was within the certificate's...
not verifying certs for TLS to IP address / Schannel
When asked to do a TLS connection HTTPS, FTPS, IMAPS, etc to a URL specified with an IP address instead of a name, libcurl would wrongly not verify the server's name in the certificate. The signature whether it was signed by a trusted CA and validity whether the date was within the certificate's...
[Harden SSL/TLS] Hardening the SSL/TLS settings
“Harden SSL/TLS” allows hardening the SSL/TLS settings of Windows 2000,2003,2008,2008R2, XP,Vista,7. It allows locally and remotely set SSL policies allowing or denying certain ciphers/hashes or complete ciphersuites. This tool specific allows setting policies with regards to what ciphers and...
Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
This host is missing an important security update according to Microsoft Bulletin MS12-006. OpenVAS Vulnerability Test $Id: secpodms12-006.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows SSL/TLS Information Disclosure Vulnerability 2643584 Authors: Antu Sanadi Copyright c 2012 SecPod,...
Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
This host is missing an important security update according to Microsoft Bulletin MS12-006. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Fixes BEAST SSL Bug in January Patch Tuesday
Microsoft on Tuesday patched the vulnerability in Windows that was exploited by the BEAST SSL attack tool developed by Juliano Rizzo and Thai Duong last year. The patch is one of several rated important that was issued by Microsoft in January’s Patch Tuesday release, and there also was a critical...
MS12-006: Description of the security update for Webio, Winhttp, and schannel in Windows: January 10, 2012
None None...
CVE-2010-3229
The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...
Denial of service
The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...
CVE-2010-3229
CVE-2010-3229 is a TLSv1/SSL denial-of-service flaw in Microsoft Windows’ SChannel when IIS 7.x hosts SSL websites. The vulnerability arises from SChannel failing to check a condition before processing client certificates during SSL/TLS handshakes, allowing a remote attacker to cause LSASS to sto...
CVE-2010-3229
The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...
Microsoft Windows SChannel Denial of Service Vulnerability (2207566)
This host is missing a critical security update according to Microsoft Bulletin MS10-085. OpenVAS Vulnerability Test $Id: secpodms10-085.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows SChannel Denial of Service Vulnerability 2207566 Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...
Microsoft Windows multiple security vulnerabilities
Multiple privilege escalation with different drivers. MFC buffer overflow. EOT and OTF fonts memory corruptions and integer overflow. comctl32 buffer overflow. LPC buffer overflow. SChannel DoS...
Microsoft Security Bulletin MS10-085 - Important Vulnerability in SChannel Could Allow Denial of Service (2207566)
Microsoft Security Bulletin MS10-085 - Important Vulnerability in SChannel Could Allow Denial of Service 2207566 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Secure Channel SChannel security...
MS10-085: Vulnerability in SChannel Could Allow Denial of Service (2207566)
The remote Windows host is running a version of the Secure Channel SChannel security package that is affected by a denial of service vulnerability. This flaw exists in the way that SChannel processes client certificates. A remote attacker could send a specially crafted network packet to the host...
Microsoft Windows SChannel Denial of Service Vulnerability (2207566)
This host is missing a critical security update according to Microsoft Bulletin MS10-085. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows SChannel TLSv1 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability that affects the Secure Channel SChannel security package. Successful exploits will allow an attacker to crash the affected system, resulting in a system restart. Repeated attacks will cause a permanent...
Microsoft SChannel TLSv1 Denial of Service (MS10-085; CVE-2010-3229)
The Secure Channel SChannel security package is a Security Support Provider SSP that implements the Secure Sockets Layer SSL and Transport Layer Security TLS Internet standard authentication protocols. SChannel is part of the security package that helps provide an authentication service to provid...
Windows Internet Communication Settings DLL Hijacking Exploit
/ Exploit Title: Windows Internet Communication Settings DLL Hijacking Exploit schannel.dll Date: 25/08/2010 Author: ALPdaemon Email: ALPdaemon at yahoo dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .isp / include int alpdaemon WinExec"calc", SWSHOW; exit0; return 0; BOO...