8 matches found
CertVerify
CertVerify O CertVerify é uma ferramenta projetada para detectar arquivos executáveis exe, dll, sys que foram assinados com certificados de assinatura de código não confiáveis ou vazados. O objetivo desta ferramenta é identificar arquivos potencialmente maliciosos que foram assinados usando...
SSL/TLS: Untrusted Certificate Detection
Checks and reports if a remote SSL/TLS service is using a certificate which is untrusted / the verification against the system wide trust store has failed. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
OSV-2020-1019 Stack-buffer-overflow in getTLScertificate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19544 Crash type: Stack-buffer-overflow WRITE 6 Crash state: getTLScertificate tlsDetectProtocolFromCertificate ndpisearchtlstcpudp...
CVE-2017-2629
curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server...
openSUSE Security Update : lynis (openSUSE-2017-705)
This update for lynis fixes the following issues : Lynis 2.5.1 : - Improved detection of SSL certificate files - Minor changes to improve logging and results - Firewall tests: Determine if CSF is in testing mode The Update also includes changes from Lynis 2.5.0 : - CVE-2017-8108: symlink attack m...
SonicWALL Certificate Detection
Binary data 700030.prm...
EFF's HTTPS Everywhere Plugin Detects Bad Certs, Security Flaws
The EFF has released a new version of its HTTPS Everywhere browser extension, and users can now turn on a feature that will send the EFF copies of digital certificates that the browser encounters, allowing the organization to look for flawed, fake or expired certificates. The new capability is...