Lucene search
+L

760 matches found

Prion
Prion
added 2016/09/01 12:59 a.m.48 views

Design/Logic Flaw

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

5CVSS9.2AI score0.95707EPSS
SaveExploits7References135Affected Software9
ATTACKERKB
ATTACKERKB
added 2016/09/01 12:59 a.m.378 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.8AI score0.95707EPSS
SaveIn wildExploits7References155
NVD
NVD
added 2016/09/01 12:59 a.m.34 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.3AI score0.95707EPSS
SaveExploits7References137
OSV
OSV
added 2016/09/01 12:59 a.m.49 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS2.3AI score
SaveExploits0References137
AlpineLinux
AlpineLinux
added 2016/09/01 12:00 a.m.83 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.9AI score0.95707EPSS
SaveExploits7
CVE
CVE
added 2016/09/01 12:00 a.m.2216 views

CVE-2016-2183

The CVE-2016-2183 (Sweet32) issue stems from the DES/3DES ciphers used in TLS/SSL, allowing a birthday attack to recover plaintext from long, encrypted sessions. Public advisories and vendor notes show OpenSSL-based stacks (and products relying on it) were affected, with mitigations including de-...

7.5CVSS6.5AI score0.95707EPSS
SaveIn wildExploits7References137Affected Software4
Cvelist
Cvelist
added 2016/09/01 12:00 a.m.100 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

6.6AI score0.95707EPSS
SaveExploits7References135
Vulnrichment
Vulnrichment
added 2016/09/01 12:00 a.m.10 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

6.8AI score0.95707EPSS
SaveExploits7References135
OSV
OSV
added 2016/09/01 12:00 a.m.11 views

PSF-2016-4 Sweet32 attack (DES, 3DES)

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS7.4AI score0.95707EPSS
SaveExploits7References3
UbuntuCve
UbuntuCve
added 2016/08/31 12:00 a.m.96 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.8AI score0.95707EPSS
SaveExploits7References24
Positive Technologies
Positive Technologies
added 2016/08/31 12:00 a.m.11 views

PT-2016-3343

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified TLS, SSH, and IPSec protocols affected versions not specified Integrated Lights-Out 4 iLO 4 affected versions not specified Description The DES and Triple DES ciphers have a birthday bound of approximate...

10CVSS9.1AI score0.99999EPSS
SaveExploits256References1273
OSV
OSV
added 2016/08/31 12:00 a.m.9 views

UBUNTU-CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.8AI score0.95707EPSS
SaveExploits7References25
Broadcom
Broadcom
added 2016/08/31 12:00 a.m.32 views

BSA-2016-134

Security Advisory ID : BSA-2016-134 Component : Crypto Revision : 2.0: Final The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to...

7.5CVSS6.8AI score0.95707EPSS
SaveExploits7
myhack58
myhack58
added 2016/08/25 12:00 a.m.27 views

SWEET32: TLS 6 4-bit block cipher birthday attack(CVE-2 0 1 6-2 1 8 3)-vulnerability warning-the black bar safety net

The problem of the attack of harsh conditions. The attacker needs to get a lot of ciphertext, the thesis of the author is by 3 0 hours, 610GB of data to achieve. In addition, the need to plaintext in Important Information a lot of repetition which is to eventually be able to decrypt it's content,...

SaveExploits0
ThreatPost
ThreatPost
added 2016/08/24 8:00 a.m.83 views

New Collision Attacks Against 3DES, Blowfish Allow for Cookie Decryption

RC4 apparently is no longer the lone pariah among smaller cryptographic ciphers. Already broken and set for deprecation by the major browser and technology makers, RC4 could shortly have company in Triple-DES 3DES and Blowfish. Researchers are set to present new attacks against 64-bit ciphers tha...

5CVSS6.8AI score0.95707EPSS
SaveExploits7References5
Tenable Nessus
Tenable Nessus
added 2016/08/24 12:00 a.m.12 views

TLS Triple-DES Key Exchange Detection (Sweet32) (deprecated)

Binary data 7223.pasl...

7.3AI score
SaveExploits0References3
OpenSSL
OpenSSL
added 2016/08/24 12:00 a.m.145 views

SWEET32 attack on Triple-DES

Because DES and triple-DES has only a 64-bit block size, birthday attacks are a real concern. For example, with the ability to run Javascript in a browser, it is possible to send enough traffic to cause a collision, and then use that information to recover something like a session Cookie...

7.5CVSS6.6AI score0.95707EPSS
SaveExploits7Affected Software1
Openbugbounty
Openbugbounty
added 2016/07/04 8:13 a.m.11 views

rue-des-livres.com XSS vulnerability

Open Bug Bounty ID: OBB-164014 Description| Value ---|--- Affected Website:| rue-des-livres.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2016/04/26 5:57 a.m.11 views

shop.werkstatt-des-lichts.de XSS vulnerability

Vulnerable URL: http://shop.werkstatt-des-lichts.de/tagproducts.php?idtag=7'" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

6.3AI score
SaveExploits0
hackapp
hackapp
added 2016/04/01 10:13 a.m.13 views

Wortsuche des Tages - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wortsuche des Tages published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder