httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1579 Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a...

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability

Exploit for unknown platform in category local exploits ========================================================================= Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability ========================================================================= Title: Multiple...

Multiple Vendor - TLS Protocol Session Renegotiation Security

Multiple Vendor - TLS Protocol Session Renegotiation Security include include include include include include include include include include include void failconst char proc perrorproc; exit1; void setupserver int sock, int port struct sockaddrin sa; int s, r, i; s = socketAFINET, SOCKSTREAM, 0;...

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability

No description provided by source. include errno.h include stdio.h include string.h include unistd.h include sys/time.h include sys/socket.h include netinet/in.h include arpa/inet.h include netdb.h include openssl/ssl.h include openssl/ssl3.h void failconst char proc perrorproc; exit1; void...

Multiple Vendor - TLS Protocol Session Renegotiation Security

include include include include include include include include include include include void failconst char proc perrorproc; exit1; void setupserver int sock, int port struct sockaddrin sa; int s, r, i; s = socketAFINET, SOCKSTREAM, 0; if s == -1 fail"setupserver:socket"; i = 1; r = setsockopts,...

RHEL 4 : httpd (RHSA-2009:1580)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1580 advisory. The Apache HTTP Server is a popular Web server. A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer...

TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

SOL10737 - SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541

A Man in the Middle attack allows an attacker to inject an arbitrary amount of chosen plain text into the application protocol stream data during a secure session renegotiation that uses SSL version 3.x or TLS version 1.x. This may provide an attacker the ability to perform arbitrary actions on...

SSL Version 2 and 3 Protocol Detection

The remote service accepts connections encrypted using SSL 2.0 and/or SSL 3.0. These versions of SSL are affected by several cryptographic flaws, including: - An insecure padding scheme with CBC ciphers. - Insecure session renegotiation and resumption schemes. An attacker can exploit these flaws ...