CVE-2007-4902

CVE-2007-4902 describes an absolute path traversal in an ActiveX control within CryptoX.dll (versions ≤ 2.0) and the Ultra Crypto Component. The flaw allows remote attackers to write to arbitrary files by supplying a full pathname to the SaveToFile method, enabling overwriting of files on the aff...

Ultra Crypto Component (CryptoX.dll <= 2.0) SaveToFile() Inscure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------- bUltra Crypto Component CryptoX.dll = 2.0 "SaveToFile" Inscure Method/b...

Ultra Crypto Component (CryptoX.dll <= 2.0) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Ultra Crypto Component CryptoX.dll ----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url:...

Ultra Crypto Component (CryptoX.dll <= 2.0) SaveToFile() Inscure Method

Exploit for unknown platform in category remote exploits ======================================================================= Ultra Crypto Component CryptoX.dll ------------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url:...

ultra-acquire.txt

----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your ow...

Ultra Crypto Component - CryptoX.dll 2.0 SaveToFile() Insecure Method

Ultra Crypto Component - CryptoX.dll 2.0 SaveToFile Insecure Method ------------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

ultra-cryptox20.txt

------------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your...

Ultra Crypto Component - CryptoX.dll 2.0 Remote Buffer Overflow

Ultra Crypto Component - CryptoX.dll 2.0 Remote Buffer Overflow ----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

Ultra Crypto Component - 'CryptoX.dll 2.0' Remote Buffer Overflow

----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your ow...

Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method

------------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your...

Authentication flaw

Rule Set Based Access Control RSBAC before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked...

CVE-2007-3945

CVE-2007-3945 affects Rule Set Based Access Control (RSBAC) versions prior to 1.3.5. The issue stems from improper use of the Linux Kernel Crypto API for Linux kernel 2.6.x, which could allow context-dependent attackers to bypass authentication controls via unspecified vectors (e.g., potential is...

CVE-2007-3945

Rule Set Based Access Control RSBAC before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked...

Design/Logic Flaw

Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES in the Linux kernel before 2.6.21.3 allows attackers to obtain sensitive information via unspecified vectors...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets Advisory ID: cisco-sa-20070522-SSL http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml Revision 1.0 For Public Release 2007 May 22 1300 UTC GMT -...

CVE-2006-3894

The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects...

CVE-2006-3894

The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects...

CVE-2006-3894

The CVE-2006-3894 issue affects RSA BSAFE Crypto-C and Cert-C libraries (pre-6.3.1 and pre-2.8, respectively) used by Cisco and other products. The vulnerability stems from parsing malformed ASN.1 objects and can cause remote denial of service. Affected Cisco products include IOS, IOS XR, PIX/ASA...

Vulnerability In Crypto Library

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

RSA BSAFE libraries denial of service vulnerability

Overview The RSA BSAFE Crypto-C and Cert-C libraries contain a denial-of-service vulnerability. Description RSA BSAFE products include software libraries that developers can use to implement cryptography in their applications. The RSA BSAFE Crypto-C and Cert-C libraries contain a denial-of-servic...