4553 matches found
Certificate Based Authentication : Troubleshooting Tips
This document specifically addresses some common troubleshooting tips and guidelines that would help in tackling certain issues related with the Certificate based authenticationCBA. Please ensure that the initial configuration is set as per the article: https://support.citrix.com/article/CTX22047...
For NXP I. MX microprocessor HAB vulnerability analysis-vulnerability warning-the black bar safety net
One, Foreword NXP（NXP）semiconductor production company i. The MX Series application processor of the Secure Boot features in the presence of two vulnerabilities, two vulnerabilities by Quarkslab the two researchers Guillaume Delugré and Kévin Szkudłapski found this article on the two vulnerabilit...
PT-2017-11965
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Director version 1.1 Description The issue concerns the lack of validation and signing of configuration and database backup archives. Recommendations For Trend Micro Deep Discovery Director version 1.1, consider...
Change Token Signing Certificate Expiration Date
When using ADFS 3.0, the Token-Signing Certificate that is generated during setup is, and can be, a Self-Signed Certificate. By default, the Token-Signing Certificate will expire 1 year after it is created. It will also automatically roll-over 2 weeks before expiration if Certification roll-over ...
smb2-security-mode NSE Script
Determines the message signing configuration in SMBv2 servers for all supported dialects. The script sends a SMB2COMNEGOTIATE request for each SMB2/SMB3 dialect and parses the security mode field to determine the message signing configuration of the SMB server. References: Script Arguments...
Unauthorised Access Through Bypassing URL Signing And Security Rules
Symfony is susceptible to unauthorized access. A malicious user can bypass URL signing and security rules by passing an empty or invalid hash to the fragment path to gain access to any controller since the application does not properly check if the controller attribute was set. This only affects...
puppet-naivesigning NSE Script
Detects if naive signing is enabled on a Puppet server. This enables attackers to create any Certificate Signing Request and have it signed, allowing them to impersonate as a puppet agent. This can leak the configuration of the agents as well as any other sensitive information found in the...
[SECURITY] Fedora 26 Update: pius-2.2.4-1.fc26
The PGP Individual UID Signer PIUS is a tool for individually signing all of the UIDs on a set of keys and encrypt-emailing each one to it's respective email address. This drastically reduces the time and errors involved in signing keys after a key signing party...
Oracle Linux 7 : bind (ELSA-2017-1680)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1680 advisory. - Fix CVE-2017-3142 and CVE-2017-3143 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
bind security update
CentOS Errata and Security Advisory CESA-2017:1679 An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2016-3997
NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...
CVE-2016-3997
NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...
Design/Logic Flaw
NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...
CVE-2016-3997
NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...
CVE-2016-3997
NetApp CVE-2016-3997 affects Clustered Data ONTAP (N series) where SMB signing is not enforced by default, enabling MITM attacks that can disclose data, escalate privileges, or cause DoS. Root cause: SMB implementation fails to require signing by default. Impact: information disclosure, privilege...
CVE-2016-3997: Undefined Security Weakness
NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...
openssl: Non-constant time codepath followed for certain operations in DSA implementation
It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm DSA signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system...
Important: Red Hat Security Advisory: bind security and bug fix update
An update for bind is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise Linux 6.6 Advanc...
kernel security and bug fix update
3.10.0-514.26.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676...