GnuPG: ElGamal signing keys compromised and format string vulnerability

Background GnuPG is a popular open source signing and encryption tool. Description Two flaws have been found in GnuPG 1.2.3. First, ElGamal signing keys can be compromised. These keys are not commonly used, but this is "a significant security failure which can lead to a compromise of almost all...

security flaw

GnuPG GPG 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 sign+encrypt keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature...

[Full-Disclosure] GnuPG's ElGamal signing keys compromised

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GnuPG's ElGamal signing keys compromised ========================================== Summary ======= Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead ...

ElGamal sign+encrypt keys created by GnuPG can be compromised

Any ElGamal sign+encrypt keys created by GnuPG contain a cryptographic weakness that may allow someone to obtain the private key. These keys should be considered unusable and should be revoked. The following summary was written by Werner Koch, GnuPG author: Phong Nguyen identified a severe bug in...

MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (329170)

The remote version of Windows contains a flaw in the SMB signing implementation. SMB signing is used to sign each packets sent between a client and a server to protect them against man-in-the-middle attacks. If the Domain policy is configured to force usage of SMB signing, it is possible for an...

Windows 2000 SMB signing protection bypass

During connectio nsetup it's possible to switch off SMB signing regardless of policy setting...

Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in SMB Signing Could Enable Group Policy to be Modified 309376 Released: 11 December 2002 Revised: 22 January 2003 version 2.0 Software: Microsoft Windows 2000 Microsoft Windows...

Multiple Windows 2000 driver signing problems

It's possible to spoof file with older one, problem in certificate chain validation...

CVE-2002-1256

The SMB signing capability in the Server Message Block SMB protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying gro...

Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in SMB Signing Could Enable Group Policy to be Modified 309376 Date: 11 December 2002 Software: Windows 2000, Windows XP Impact: Modify group policy Max Risk: Moderate Bulletin:...

Verisign transmits sensitive customer information in plain text when applying for a "Code Signing Digital ID"

Overview Verisign offers a service entitled "Code Signing Digital ID for Microsoft Authenticode." Information that is submitted to this site is not transmitted via an SSL secured session, instead it is transmitted in the plain-text. Description Verisign offers a service entitled "Code Signing...

CVE-2001-1016

PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trust...

Проблемы в PGP Desktop Security

Пользователь получивший право подписи одного документа с помощью разделенного ключа может подписать этим же ключем любой другой документ при включеном кэшировании ключевой фразы без согласия остальных держателей ключа...

Security Bulletin MS01-017

---------------------------------------------------------------------- Title: Erroneous VeriSign-Issued Digital Certificates Pose Spoofing Hazard Date: 22 March 2001 Software: All Microsoft customers should read the bulletin. Impact: Attacker could digitally sign code using the name "Microsoft...

Service Pack 1 for Forefront Identity Manager 2010 R2 - Service and Portal Language Pack (KB2814853)

This is Service Pack 1 for the Forefront Identity Manager 2010 R2 Service and Portal Language Pack. This update also fixes a signing issue described in Microsoft Security Advisory 2749655, which affected hotfix rollup package KB2734159 build 4.1.2515.0...

Service Pack 1 for Forefront Identity Manager 2010 R2 - Add-ins and Extensions Language Pack (KB2814853)

This is an important Service Pack for Forefront Identity Manager 2010 R2. This update enables support for Windows 8 and Office 2013. This update also fixes a signing issue described in Microsoft Security Advisory 2749655, which affected hotfix rollup package KB2734159 build 4.1.2515.0...

Service Pack 1 for Forefront Identity Manager 2010 R2 - Service and Portal (KB2814853)

This is an important Service Pack for Forefront Identity Manager 2010 R2. It contains bug fixes and enables support for Windows Server 2012, SQL 2012, and SharePoint 2013. This update also fixes a signing issue described in Microsoft Security Advisory 2749655, which affected hotfix rollup package...

Service Pack 1 for Forefront Identity Manager 2010 R2 - Certificate Management Client (KB2814853)

This is an important Service Pack for Forefront Identity Manager 2010 R2. It enables support for Windows 8. This update also fixes a signing issue described in Microsoft Security Advisory 2749655, which affected hotfix rollup package KB2734159 build 4.1.2515.0...

Service Pack 1 for Forefront Identity Manager 2010 R2 - Synchronization Service (KB2814853)

This is an important Service Pack for Forefront Identity Manager 2010 R2. It contains design changes, bug fixes, and enables support for Windows Server 2012, SQL 2012, and SharePoint 2013. This update also fixes a signing issue described in Microsoft Security Advisory 2749655, which affected hotf...

Service Pack 1 for Forefront Identity Manager 2010 R2 - Certificate Management Bulk Client (KB2814853)

This is an important Service Pack for Forefront Identity Manager 2010 R2. It enables support for Windows 8. This update also fixes a signing issue described in Microsoft Security Advisory 2749655, which affected hotfix rollup package KB2734159 build 4.1.2515.0...