EUVD-2014-7066

Malware in sbrugna...

GO-2021-0154 Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

When SessionTicketsDisabled is enabled, crypto/tls allowed man-in-the-middle attackers to spoof clients via unspecified vectors. If the server enables TLS client authentication using certificates this is rare and explicitly sets SessionTicketsDisabled to true in the tls.Config, then a malicious...

Man-in-the-Middle (MitM)

crypto/tls in github.com/golang/go is vulnerable to man-in-the-middle MitM attacks. These attacks are possible when SessionTicketsDisabled is enabled...

Amazon Linux: Security Advisory (ALAS-2014-437)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-7189

crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors...

CVE-2014-7189

crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors...

CVE-2014-7189

crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors...

PT-2014-7824

Name of the Vulnerable Software and Affected Versions Go versions 1.1 through 1.3.2 Description The issue allows man-in-the-middle attackers to spoof clients via unspecified vectors when SessionTicketsDisabled is enabled. This can occur when the server enables TLS client authentication using...

CVE-2014-7189: Undefined Security Weakness

crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors...