455 matches found
AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit
Exploit for unknown platform in category remote exploits ======================================================== AEP SmartGate 4.3b GET Arbitrary File Download Exploit ======================================================== / prdelka-vs-AEP-smartgate ======================== Smartgate is an...
AEP SmartGate 4.3b - 'GET' Arbitrary File Download
/ prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, law enforcement, homeland security, public safety,...
AEP SmartGate 4.3b - GET Arbitrary File Download
AEP SmartGate 4.3b - GET Arbitrary File Download / prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, la...
altnwebadmin.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities RELEASE DATE: August 21st, 2006 VENDOR: Alt-N Technologies http://www.altn.com VULNERABLE: Tested on Alt-N WebAdmin v3.2.3/3.2.4 running with MDaemon v9.0.5, earlier versions are suspected vulnerable a...
CVE-2006-0999
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...
CVE-2006-0997
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic...
Design/Logic Flaw
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...
CVE-2005-1247
webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability...
POP SSL/TLS Server Detection
Binary data 4000.prm...
Apache Httpd < 2.0.51 : Malicious SSL proxy can cause crash
An issue was discovered in the modssl module in Apache 2.0.44-2.0.50 which could be triggered if the server is configured to allow proxying to a remote SSL server. A malicious remote SSL server could force an httpd child process to crash by sending a carefully crafted response header. This issue ...
Apache OpenSSL ASN.1 parsing bugs <=0.9.6j BruteForce Exploit
Exploit for unknown platform in category dos / poc ============================================================= Apache OpenSSL ASN.1 parsing bugs include include include include include include include include include include include include include include char buf8192; / This was simply sniffe...
CVE-2005-1247
webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability...
OpenSSL ASN.1 0.9.6j0.9.7b - Brute Forcer for Parsing Bugs
OpenSSL ASN.1 0.9.6j0.9.7b - Brute Forcer for Parsing Bugs / Brute forcer for OpenSSL ASN.1 parsing bugs include include include include include include include include include include include include include include char buf8192; / This was simply sniffed from an stunnel session / const char...
Brute forcer for OpenSSL ASN.1 parsing bugs (<=0.9.6j <=0.9.7b)
No description provided by source. / Brute forcer for OpenSSL ASN.1 parsing bugs =0.9.6j =0.9.7b written by Bram Matthys Syzop on Oct 9 2003. This program sends corrupt client certificates to the SSL server which will 1 crash it 2 create lots of error messages, and/or 3 result in other...
new vulnerability in Netscape effectively disables SSL server auth
-----BEGIN PGP SIGNED MESSAGE----- Introduction ============ This vulnerability defeats SSL server authentication in Netscape 4.73 and earlier versions. This is a new vulnerability unrelated to CERT advisory 2000-5. However, it has a similar devastating effect: destroying SSL server authenticatio...