Dropbear dbclient SSH server spoofing

User is not adequately warned on server crypto key mismatch...

FreeBSD : OpenSSL -- Multiple problems in crypto(3) (0f37d765-c5d4-11db-9f82-000e0c2e438a)

Several problems have been found in OpenSSL : - During the parsing of certain invalid ASN1 structures an error condition is mishandled, possibly resulting in an infinite loop. - A buffer overflow exists in the SSLgetsharedciphers function. - A NULL pointer may be dereferenced in the SSL version 2...

FreeBSD : openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3) (077c2dca-8f9a-11db-ab33-000e0c2e438a)

Problem Description When verifying a PKCS1 v1.5 signature, OpenSSL ignores any bytes which follow the cryptographic hash being signed. In a valid signature there will be no such bytes. Impact OpenSSL will incorrectly report some invalid signatures as valid. When an RSA public exponent of 3 is use...

CRYPTO-Server installvariables.properties LDAP Credential Local Disclosure

A version of CRYPTOCard CRYPTO-Server, the server component of a commercial two-factor authentication system, is installed on the remote host. When CRYPTO-Server was installed on the remote host, the installer left credentials used to configure the application with Active Directory in a log file,...

CVE-2006-6145

CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6145

CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6145

CRYPTOCard CRYPTO-Server (before 6.4.56) stores LDAP credentials in plaintext in UninstallerData\installvariables.properties with insecure file permissions, allowing local users to obtain the credentials. This is documented in CVE-2006-6145 and corroborated by related Nessus findings. The vulnera...

Solaris 8 (sparc) : 113355-11

Sun Crypto Accelerator 1000 Patch. Date this patch was last updated by Sun : Feb/28/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 114795-05

Crypto Accelerator 4000 - 1.0: product patch. Date this patch was last updated by Sun : Feb/24/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 114796-04

Crypto Accelerator 4000 - 1.0: product patch. Date this patch was last updated by Sun : May/17/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 114795-05

Crypto Accelerator 4000 - 1.0: product patch. Date this patch was last updated by Sun : Feb/24/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 112869-02

Sun Crypto Accelerator 1000 Patch. Date this patch was last updated by Sun : Aug/14/02 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2006-5550

The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto...

CVE-2006-5550

The CVE concerns the kernel of FreeBSD 6.1 and OpenBSD 4.0 where local users can cause a denial of service through certain ioctl requests to /dev/crypto. The connected sources confirm the affected OS versions and the attack vector (local, via ioctl on /dev/crypto) but do not provide technical roo...

FreeBSD 6.1 (/dev/crypto) Local Kernel Denial of Service Exploit

Exploit for bsd platform in category dos / poc ================================================================ FreeBSD 6.1 /dev/crypto Local Kernel Denial of Service Exploit ================================================================ // Evgeny Legerov elegerov.blogspot.com include unistd.h...

FreeBSD 6.1 - devcrypto Local Kernel Denial of Service

FreeBSD 6.1 - devcrypto Local Kernel Denial of Service // Evgeny Legerov elegerov.blogspot.com include unistd.h include sys/types.h include stdio.h include fcntl.h include crypto/cryptodev.h int main int fd2, fd; struct cryptkop kop; printf"FreeBSD 6.1 /dev/crypto local kernel DoS\n"; fd2 =...

FreeBSD 6.1 - '/dev/crypto' Local Kernel Denial of Service

// Evgeny Legerov elegerov.blogspot.com include unistd.h include sys/types.h include stdio.h include fcntl.h include crypto/cryptodev.h int main int fd2, fd; struct cryptkop kop; printf"FreeBSD 6.1 /dev/crypto local kernel DoS\n"; fd2 = open"/dev/crypto", ORDWR, 0; if fd2 == -1 perror"open";...

CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

CVE-2006-3968 affects Sun Solaris 10 (3/05 HW2) on Sun Fire T2000 platforms. The crypto provider fails to correctly verify DSA signatures, which might allow data modification to go undetected. Root cause is incorrect DSA signature verification in the Solaris crypto provider when running on affect...