-CVE-2020-0601-ECC---EXPLOIT

CurveBall CVE-2020-0601 - ECC/Po2 漏洞利用 CVE-2020-0601，通常被称为CurveBall，是一个漏洞，其中使用椭圆曲线密码学（ECC）的证书签名并未被正确验证。 ECC依赖于不同的参数。许多曲线使用标准化参数。然而，微软并没有像他们那样的天才一样检查所有这些参数……参数 G（生成元）并未被检查，因此攻击者可以提供自定义的生成元，这样当微软尝试验证证书是否来自受信任的CA时，它只会查找匹配的公钥，然后嘣，它就会使用证书中的生成元。 NSA清楚地解释了此漏洞的破坏性影响以及更多信息，请参见此处。准备好就开始吧！...

CurveBall-CVE-2020-0601-PoC

CurveBall CVE-2020-0601 - PoC Esta vulnerabilidad, conocida como CurveBall, se debe a una verificación no válida de los certificados que utilizan el algoritmo ECC. Windows intenta verificar certificados previamente verificados desde la caché de certificados y, al hacerlo, solo comprueba si las...

cve-2020-0601-plugin

Zeek 测试脚本：CVE-2020-0601 该脚本可以检测针对 CVE-2020-0601 的利用尝试。它会检查证书中是否使用了已知曲线——如果不是，则会触发告警。 在 notice.log 中的告警示例： root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110 192.241.202.21 4433 F37z6n1B8zn1fZjpj application/x-x509-user-cert 192.241.202.21:4433/tcp tcp...

cve-2020-0601

针对CVE-2020-0601的Zeek测试脚本 此脚本可以检测针对CVE-2020-0601的利用尝试。它执行一个简单的检查，以查看证书中是否使用了已知曲线——如果不是则会发出通知。 notice.log中的示例通知： root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110 192.241.202.21 4433 F37z6n1B8zn1fZjpj application/x-x509-user-cert 192.241.202.21:4433/tcp tcp...

EUVD-2014-8401

Malware in sbrugna...

Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)

None None...

Microsoft Windows CryptoAPI fails to properly validate ECC certificate chains

Overview The Microsoft Windows CryptoAPI fails to properly validate certificates that use Elliptic Curve Cryptography ECC, which may allow an attacker to spoof the validity of certificate chains. Description The Microsoft Windows CryptoAPI, which is provided by Crypt32.dll, fails to validate ECC...

[ MDVSA-2014:215 ] gnutls

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:215 http://www.mandriva.com/en/support/security/ Package : gnutls Date : November 19, 2014 Affected: Business Server 1.0 Problem Description: Updated gnutls package fix security vulnerability: An out-of-boun...

MGASA-2014-0458 Updated gnutls package fix security vulnerability

An out-of-bounds memory write flaw was found in the way GnuTLS parsed certain ECC Elliptic Curve Cryptography certificates or certificate signing requests CSR. A malicious user could create a specially crafted ECC certificate or a certificate signing request that, when processed by an application...

CVE-2014-8564

The gnutlseccansix963export function in gnutlsecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service out-of-bounds write via a crafted 1 Elliptic Curve Cryptography ECC certificate or 2 certificate signing requests CSR,...

gnutls security update

CentOS Errata and Security Advisory CESA-2014:1846 Updated gnutls packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Moderate: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...