4165 matches found
OpenSSH -- Memory corruption in sshd
The OpenSSH development team reports: A memory corruption vulnerability exists in the post- authentication sshd process when an AES-GCM cipher [email protected] or [email protected] is selected during kex exchange. If exploited, this vulnerability might permit code execution with the...
Apple Turns on BEAST Attack Mitigation by Default in Safari
Apple enabled a feature in its recent OS X Mavericks update that neutered the BEAST cryptographic attacks. BEAST is a two-year-old attack tool that exploits a vulnerability in TLS 1.0 and SSL 3.0 and could lead to an attacker stealing HTTPS cookies or hijacking browser sessions. Apple’s Safari...
CVE-2013-5548
The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...
Authentication flaw
The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...
CVE-2013-5548
The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...
CVE-2013-5548
The CVE-2013-5548 issue affects Cisco IOS IKEv2 when using AES-GCM or AES-GMAC for Phase 2 SAs. The vulnerability is due to improper logic that enables or disables IPsec anti-replay protection, allowing remote attackers to bypass anti-replay protections on IPsec tunnel traffic. Affected component...
CVE-2013-5548: Undefined Security Weakness
The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...
Cisco IOS Software Internet Key Exchange Version 2 Anti-replay Protection Disabled Vulnerability
A vulnerability in the implementation of the Cisco IOS Software Internet Key Exchange version 2 IKEv2 protocol may cause the anti-replay capabilities of IPsec to be disabled. This issue occurs only when using the Advanced Encryption Standard Galois/Counter Mode AES-GCM or the AES Galois Message...
PT-2013-5629
Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic when AES-GCM or AES-GMAC is used. This occurs due to improper coding of the logic...
[SECURITY] Fedora 19 Update: python-crypto-2.6.1-1.fc19
PyCrypto is a collection of both secure hash functions such as MD5 and SHA, and various encryption algorithms AES, DES, RSA, ElGamal, etc...
[AxCrypt] Open Source Windows File Encryption Software
AxCrypt is the leading open source Windows file encryption software. It integrates seamlessly with Windows to compress, encrypt, decrypt, store, send and work with individual files. Personal Privacy and Security with AES-128 File Encryption and Compression for Windows 2000/2003/XP/Vista/2008/7...
Silent Circle Moving Away From NIST Ciphers in Wake of NSA Revelations
The first major domino to fall in the crypto world after the NSA leaks by Edward Snowden began was the decision by Lavabit, a secure email provider, to shut down in August rather than comply with a government order. Shortly thereafter, Silent Circle, another provider of secure email and other...
CVE-2013-2782
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key...
Information disclosure
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key...
CVE-2013-2782
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key...
CVE-2013-2782
CVE-2013-2782 affects Schneider Electric Trio J-Series License Free Ethernet Radio firmware 3.6.0–3.6.3, where the AES encryption key is reused across different customer installations due to improper key generation. This weakens cryptographic protection and could allow remote attackers to access ...
PT-2013-3925
Name of the Vulnerable Software and Affected Versions Schneider Electric Trio J-Series License Free Ethernet Radio versions 3.6.0 through 3.6.3 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of the AES encryption key, which is t...
CVE-2013-2782: Undefined Security Weakness
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key...
Cisco WebEx One-Click Client Password Encryption Information Vulnerability
Exploit for windows platform in category remote exploits include include include include unsigned char aesofbencryptunsigned char text, int length, unsigned char key, unsigned char iv unsigned char outbuf = calloc1,length; int num = 0; unsigned char liv16; memcpyliv,iv,16; AESKEY aeskey;...
SIM Card Vulnerability Could Affect Millions of Cell Phones
As many as 750 million mobile phones could be vulnerable to an encryption flaw on certain types of SIM cards, a German cryptographer and researcher warned over the weekend. Karsten Nohl, the founder of Security Research Labs in Berlin, unveiled preliminary research on his blog behind the flaw in...