Design/Logic Flaw

A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services WAAS 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service DoS condition where the WAN optimization could stop functioning while the process restarts. T...

CVE-2017-6628

CVE-2017-6628 affects Cisco WAAS WAAS SMART-SSL Accelerator (versions 6.2.1, 6.2.1a, 6.2.3a). The issue arises from improper handling of SSL/TLS alerts in a specific connection state, enabling an unauthenticated remote attacker to trigger a DoS where WAN optimization stops processing traffic brie...

Cisco Wide Area Application Services SMART-SSL Accelerator Denial of Service Vulnerability

A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition where the WAN optimization could stop functioning while the process restarts. The vulnerability is due to...

Citrix Director: Could Not Establish Trust Relationship for the SSL/TLS Secure Channel

Director display in License Server section Cannot retrieve the data. Data source unresponsive due to configuration error. View Director server event logs for further information Checking the Application event log on the server running Director- logs event error: Event ID: 8 Level: Error Source:...

BSA-2017-259

Security Advisory ID : BSA-2017-259 Component : Weak ciphers such as RC4-MD5 Revision : 1.0: Interim If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually...

EulerOS 2.0 SP1 : samba (EulerOS-SA-2016-1014)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in Samba's DCE/RPC protocol implementation. A remote, authenticated attacker could use these flaws to cause a denial of...

Cisco ASA Software SSL / TLS Packet Handling DoS (cisco-sa-20170419-asa-tls)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a denial of service vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code due to improper parsing of crafted SSL o...

Cisco ASA Software SSL/TLS Denial of Service Vulnerability (cisco-sa-20170419-asa-tls)

A vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a reference...

SSL/TLS: Report 'Anonymous' Cipher Suites

This routine reports all SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.108147";...

[SECURITY] Fedora 26 Update: mbedtls-2.4.2-1.fc26

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

[SECURITY] Fedora 25 Update: mbedtls-2.4.2-1.fc25

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

[SECURITY] Fedora 24 Update: mbedtls-2.4.2-1.fc24

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

Reaching toward universal TLS SNI

The past few years have seen a dramatic increase in client support for TLS SNI a technology standard that makes HTTPS much more scaleable. While early 2014 saw fewer than 85% of HTTPS requests being sent by clients supporting TLS SNI, many Akamai customers today now see client TLS SNI usage...

SSLsplit - transparent SSL/TLS interception

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is designed to transparently terminate connections that are redirected to it using a...

Unisys ClearPath MCP Denial of Service Vulnerability

Unisys ClearPath MCP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SSL/TLS: TLS/SPDY Protocol Information Disclosure Vulnerability (CRIME)

The TLS/SPDY protocols are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for openssl RHSA-2017:0286-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : java-1.7.0-ibm (RHSA-2017:0337)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0337 advisory. - SSL/TLS: Birthday attack against 64-bit block ciphers SWEET32 CVE-2016-2183 - OpenJDK: incorrect ECDSA signature extraction from the DER...

SSL/TLS: IRC 'STARTTLS' Command Detection

Checks if the remote IRC server supports SSL/TLS with the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

SSL/TLS: MySQL / MariaDB (STARTTLS-like) SSL/TLS Detection

Checks if the remote MySQL / MariaDB server supports STARTTLS-like SSL/TLS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...