CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

PT-2007-5346 · Visionsoft · Visionsoft Audit

Name of the Vulnerable Software and Affected Versions: Visionsoft Audit version 12.4.0.0 Description: The issue concerns the use of weak cryptography, specifically XOR, in two areas: transmitting passwords over the network and storing passwords in a configuration file. This weakness allows remote...

Solaris 10 (x86) : 125794-02

SunOS 5.10x86: cryptmod patch. Date this patch was last updated by Sun : Jul/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Design/Logic Flaw

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...

CVE-2007-3528

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...

CVE-2007-3528

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...

CVE-2007-3528

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...

CVE-2007-3528

CVE-2007-3528 affects DAR (Digital Alarm Router? actually the DAR project) before version 2.3.4. The vulnerability stems from the Blowfish-CBC mode: (1) make_ivec in libdar/crypto.cpp discards random bits, producing predictable and repeating IVs, and (2) direct use of a password for keying. This ...

CVE-2007-3528

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...

CVE-2007-3528

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...

CVE-2007-2813

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed 1 ClientHello, 2 ChangeCipherSpec, or 3 Finished message during an SSL session...

Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets

Cisco IOS device may crash while processing malformed Secure Sockets Layer SSL packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device. Successful repeated exploitation of any of these...

Stegano weak cryptography

Decryption key is stored with data...

MOODLE <= 1.5.2 user password read out

--/ INTRODUCTION -- / Advisory : MOODLE = 1.5.2 user password read out Release Date : 17. March 2007 Application : Moodle.org is a course management system CMS : to help educators create effective online learning communities. Impact : read out user account passwords in md5 hash Googledork :...

VMWare VirtualClient cryptography protection bypass

SSL server certificate is not checked by client...

Novell BorderManager ISAKMP weak cryptography

Predictable cookie generation allows DoS and replay attacks...

[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory OpenPKG GmbH http://openpkg.org/security/ http://openpkg.com OpenPKG-SA-2006.029 2006-11-04 Package: bind Vulnerability: signature verification failure OpenPKG Specific: no Affected Series: Affected Packages: Corrected...

OpenSSL cryptography security vulnerabilities

It's possible to spoof signature of PKCS 1 v1.5 RSA key with exponent 3...

FreeBSD-SA-06:19.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:19.openssl Security Advisory The FreeBSD Project Topic: Incorrect PKCS1 v1.5 padding validation in crypto3 Category: contrib Module: openssl Announced:...

OpenSSL RSA Signature Forgery Vulnerability

OpenSSL versions 0.9.7j and prior and 0.9.8b and prior contain a vulnerability that could allow an unauthenticated, remote attacker to successfully pass a forged X.509 certificate. The vulnerability could allow an unauthenticated, remote attacker to pass a forged Public-Key Cryptography Standards...