Fedora 20 : mingw-openssl-1.0.1e-5.fc20 (2014-1567)

Synced patches with native openssl-1.0.1e-38.fc21 which fixes various CVE's and also enables ECC support Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

[Harden SSL/TLS] Hardening the SSL/TLS settings

“Harden SSL/TLS” allows hardening the SSL/TLS settings of Windows 2000,2003,2008,2008R2, XP,Vista,7. It allows locally and remotely set SSL policies allowing or denying certain ciphers/hashes or complete ciphersuites. This tool specific allows setting policies with regards to what ciphers and...

ruby security update

1.8.7.352-13 - Workaround build issues against OpenSSL with enabled ECC curves. - Make DRb compatible with OpenSSL 1.0.1. ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing...

Fedora 19 : gnutls-3.1.16-1.fc19 (2013-20628)

Minor security update from upstream. New minor upstream release fixing a security issue. Adds ECC NIST Suite B curves support ECDH, ECDSA Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 19 : gnutls-3.1.15-1.fc19 (2013-20052)

New minor upstream release fixing a security issue. Adds ECC NIST Suite B curves support ECDH, ECDSA Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CVE-2013-6284

Unspecified vulnerability in the Statutory Reporting for Insurance FSSR component in the Financial Services module for SAP ERP Central Component ECC allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."...

Code injection

Unspecified vulnerability in the Statutory Reporting for Insurance FSSR component in the Financial Services module for SAP ERP Central Component ECC allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."...

CVE-2013-6284

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

PT-2013-5988

Name of the Vulnerable Software and Affected Versions SAP ERP Central Component ECC Financial Services module affected versions not specified Description The issue is related to a code injection vulnerability in the Statutory Reporting for Insurance FS SR component, allowing attackers to execute...

PT-2013-4250

Name of the Vulnerable Software and Affected Versions SAP ERP Central Component ECC affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the CJDB FILL MEMORY FROM PPB function within the Project System PS-IS module. These vulnerabilities allo...

CVE-2013-3244: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in the CJDBFILLMEMORYFROMPPB function in the Project System PS-IS module for SAP ERP Central Component ECC allow remote attackers to execute arbitrary code via a 1 RFC or 2 SOAP-RFC request...

Experts Urge ECC crytpo over RSA algorithm

LAS VEGAS – Cryptographic breakthroughs have accelerated in the past six months in areas such as discrete logarithm computations that lead experts to believe that breaking the stalwart RSA algorithm may be in the not-too-distant future. A team of crypto experts today at Black Hat USA 2013 present...

Cryptocat Key Generation Vulnerability Put Chats at Risk

Cryptocat, an open source encrypted Web-based chat application, is taking heat from numerous places after a vulnerability was discovered that put chats at risk for relatively simple decryption, experts say. Worse, says researcher Steve Thomas who found the flaw, is that it likely was present in t...

Code injection

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

CVE-2012-4622

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

CVE-2012-4622

The CVE-2012-4622 entry concerns Cisco Catalyst 4500E switches with Supervisor Engine 7L-E. A vulnerability in Cisco IOS XE 03.02.00.XO.15.0(2)XO on these devices allows remote attackers to trigger uncorrected ECC errors and cause a DoS by sending specially crafted/malformed packets, potentially ...

CVE-2012-4622: Undefined Security Weakness

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

Potential for signature integrity compromise in Intel® Integrated Performance Primitives (Intel® IPP) Cryptography Domain

Summary: The cryptography CP domain in Intel’s newest version of Intel® Integrated Performance Primitives Intel® IPP v7.1 has been enhanced to improve its security and customers are strongly urged to update to this release. Description: Intel IPP v7.1 introduces Intel® AVX & Intel® AVX2 performan...

CVE-2012-0254

CVE-2012-0254 denotes a stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control, affecting Honeywell HPS Experion (R2xx, R30x, R31x, R400.x); HBS Enterprise Building Manager (R400, R410.1); and ECC SymmetrE (R410.1). The vulnerability can allow remote attackers to execut...

PT-2012-2441

Name of the Vulnerable Software and Affected Versions Honeywell Process Solutions HPS Experion versions R2xx through R400.x Honeywell Building Solutions HBS Enterprise Building Manager versions R400 through R410.1 Honeywell Environmental Combustion and Controls ECC SymmetrE version R410.1...