229 matches found
Ubuntu 18.04 LTS : Yubico PIV Tool vulnerabilities (USN-4276-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4276-1 advisory. It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker wit...
Ubuntu: Security Advisory (USN-4276-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4276-1: Yubico PIV Tool vulnerabilities
It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...
USN-4276-1 Yubico PIV Tool vulnerabilities
It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...
Security advisory YSA-2020-01 | Yubico
Yubico received a report from LinkedIn Information Security indicating there is insufficient data validation in the open-source project for YubiKey Validation Server git: yubikey-val. Yubico verified the issue and has made a security update available to mitigate this issue and enhance the...
OpenBSD 6.6 Multiple Authentication Bypass Vulnerabilities
Binary data openbsdauthbypass.nbin...
U.S. Dept Of Defense: Git repo on https://██████.mil/ discloses API password
Summary: I found a .git repository on https://███████.mil/.git which discloses an API password for Yubikey on 2 different domains, together with full source code. Description: Fetching the git repository and decompressing the objects results in the ability to read the source code of the server,...
OpenBSD Hit with Authentication, LPE Bugs
An authentication bypass and three local privilege-escalation LPE bugs have been uncovered in OpenBSD, the Unix-like open-source operating system known for its security protections. The most severe of the vulnerabilities is the bypass CVE-2019-19521, which is remotely exploitable. OpenBSD uses BS...
CVE-2019-19522
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
CVE-2019-19522
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
Default configuration
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
Qualys Security Advisory - OpenBSD Authentication Bypass / Privilege Escalation
Qualys Security Advisory Authentication vulnerabilities in OpenBSD ============================================================================== Contents ============================================================================== 1. CVE-2019-19521: Authentication bypass 1.1. Analysis 1.2. Cas...
OpenBSD has an unspecified vulnerability (CNVD-2019-44737)
OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD project team. A security vulnerability exists in OpenBSD version 6.6. When the S/Key or YubiKey authentication mechanism is turned on, a local attacker can exploit the vulnerability to become the root user...
CVE-2019-19522
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
CVE-2019-19522
OpenBSD 6.6 is affected when S/Key or YubiKey authentication is enabled (non-default). A local attacker in the auth group can escalate to root because root’s file can be written to /etc/skey or /var/db/yubikey and need not be owned by root. This CVE corresponds to CVE-2019-19522. Reported impact ...
CVE-2019-19522: Incorrect Permission Assignment for Critical Resource
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
Finally, a Lightning YubiKey to Kill Password Clutter on Your iPhone
First promised back in January, the first YubiKey for iOS will help cut down on painful password clutter starting ... now...
The vulnerability of the buffer in the dev.c software for working with YubiKey security keys allows a perpetrator to execute arbitrary code.
The vulnerability of the buffer in the dev.c software for working with YubiKey security keys is related to the execution of operations beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
Fedora Update for pam-u2f FEDORA-2019-cd8f4b9568
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
