254 matches found
Microsoft Security Bulletin MS09-007 - Important Vulnerability in SChannel Could Allow Spoofing (960225)
Microsoft Security Bulletin MS09-007 - Important Vulnerability in SChannel Could Allow Spoofing 960225 Published: March 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Secure Channel SChannel security package in...
Microsoft Windows Security Support Provider SChannel Spoofing (MS09-007; CVE-2009-0085)
SSP is a dynamic-link library DLL that implements a common interface between transport-level applications and security providers by making one or more security packages available to applications.Security packages support security protocols such as Kerberos authentication and Secure Channel SChann...
Microsoft Windows SChannel Authentication Spoofing Vulnerability
Description Microsoft Windows SChannel is prone to an authentication-spoofing vulnerability because it fails to properly validate certain client-server certificate exchanges. Successful exploits will allow attackers to authenticate to trusted servers by spoofing a legitimate user's credentials...
Microsoft Windows Secure Channel integer underflow
Overview A vulnerability in Microsoft Windows Secure Channel security package may lead to execution of arbitrary code. Description Microsoft Windows Secure Channel Schannel security package implements standard network authentication protocols Secure Sockets Layer SSL and Transport Layer Security...
Microsoft Windows SChannel单字节堆溢出漏洞（MS07-031）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的安全通道（SChannel）库在实现客户端SSLv3握手协议时存在单字节堆溢出漏洞，远程攻击者可能利用此漏洞控制服务器或造成拒绝服务。 具体来讲，在处理服务器密钥交换SSL握手记录时没有充分地检查长度字段设置为0的畸形服务器端数字签名，导致在有效的堆地址上分配0长度的堆缓冲区，然后执行的逆向内存拷贝将0长度减1拷贝数字签名，这会触发整数下溢，导致堆缓冲区指针退到起始地址之前，最终导致将1字节的用户控制值覆盖到堆控制块。...
[Full-disclosure] Windows Oday release
dear all SChannel Off-By-One Heap Corruption =================================== Discovery Date: 28th August 2006 Date reported to Microsoft: 19th March 2007 Summary: The Secure Channel SChannel library on WinXP-SP1/SP2 is vulnerable to a off-by-one heap buffer overwrite. The SChannel library...
Design/Logic Flaw
Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake...
CVE-2007-2218
CVE-2007-2218 maps to a heap corruption/remote code execution vulnerability in the Windows Schannel security package. MS07-031 describes an issue where server-sent digital signatures are not adequately checked during the SSL handshake, allowing a remote attacker to execute code (browser or app us...
CVE-2007-2218
Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake...
Microsoft Windows SChannel Security Remote Code Execution Vulnerability
Description The Microsoft Windows Schannel security package is prone to a remote code-execution vulnerability. This vulnerability occurs when processing and validating server-sent digital signatures by the client application. A remote attacker could exploit this issue by convincing a victim to...
MS07-031: Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)
The remote host is running a version of Windows that has a bug in the SSL/TLS server-key exchange handling routine that may allow an attacker to execute arbitrary code on the remote host by luring a user on the remote host into visiting a rogue website. On Windows 2000 and 2003 this vulnerability...
Microsoft Security Bulletin MS07-031 - Critical Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)
Microsoft Security Bulletin MS07-031 - Critical Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution 935840 Published: June 12, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability in...
