RedHat Update for gnupg2 RHSA-2010:0603-01

Check for the Version of gnupg2 OpenVAS Vulnerability Test RedHat Update for gnupg2 RHSA-2010:0603-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Android Controversy Highlights Mobile App Store Weaknesses

Most of the angst and controversy surrounding Google’s decision to remotely erase a benign application from a couple of hundred Android phones recently has centered just on the fact that Google has that ability–as well as the ability to remotely install apps. But, as one security expert says, tha...

VMSA-2010-0009 : ESXi ntp and ESX Service Console third-party updates

a. Service Console update for COS kernel Updated COS package 'kernel' addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

Quantum Crypto System Hacked By Researchers

Physicists have mounted the first successful attack of its kind on a commercial quantum cryptography system. Read the full article. Technology Review...

RedHat Update for openssl RHSA-2010:0163-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2010:0163-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft Windows SMB server multiple security vulnerabilities

Memory corruptions, buffer overflow, DoS conditions, cryptography weakness...

Inside the PlayStation 3 Exploit

The recent attack on the PlayStation 3 hypervisor has gotten a tremendous amount of attention, but there has not been much in the way of detailed analysis of the actual exploit itself. However, a prominent cryptographer and security researcher has looked at the exploit and found that it is a...

RedHat Update for openssl RHSA-2010:0054-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2010:0054-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RHEL 5 : openssl (RHSA-2010:0054)

Updated openssl packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer...

CVE-2009-4212

Multiple integer underflows in the 1 AES and 2 RC4 decryption functionality in the crypto library in MIT Kerberos 5 aka krb5 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by providing ciphertext with a...

CentOS 5 : openswan (CESA-2009:0402)

Updated openswan packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:309)

Multiple vulnerabilities has been found and corrected in ntp : Requesting peer information from a malicious remote time server may lead to an unexpected application termination or arbitrary code execution CVE-2009-0159. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authenticati...

Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...

Martin Hellman on Soaring, Nuclear Weapons and Cryptography

Martin Hellman, the co-inventor of public key cryptography, uses his background in security and cryptography to bring insights to two seemingly unrelated issues: nuclear weapons and soaring...

Nate Lawson: Crypto Strikes Back!

This Google Tech Talk features researcher Nate Lawson discussing recent vulnerabilities in crypto libraries, why public key cryptography is like a Ford Pinto in a demolition derby and the password-hashing mess created by Web 2.0 sites...

Google Internet Summit 2009: Security Session

Whitfield Diffie, the inventor of public-key cryptography, moderates a panel of security experts, including Howard Schmidt, Steve Crocker, Chris DiBona and Eric Grosse, discussing a variety of security topics...

[SECURITY] Fedora 11 Update: openswan-2.6.21-5.fc11

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

New AES Attack, 200-Year-Old Cipher Key Big Week in Crypto

It’s been quite a week in the world of cryptography. For a field in which advancements are measured in the smallest of terms and major breakthroughs can take decades, the three big news stories involving cryptography in the last few days comprise an epochal event. Perhaps the most interesting of...

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

Some TLS implementations handle errors processing RSA key exchanges and encryption PKCS 1 v1.5 messages in a broken way that leads an adaptive chosen-chiphertext attack. Attackers cannot recover a server's private key, but they can decrypt and sign messages with it. A strong oracle occurs when th...