228 matches found
Debian DSA-1946-1 : belpic - cryptographic weakness
It was discovered that belpic, the belgian eID PKCS11 library, does not properly check the result of an OpenSSL function for verifying cryptographic signatures, which could be used to bypass the certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian: Security Advisory (DSA-1946-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : eID-belgium (eID-belgium-541)
eID-belgium uses EVPVerifyFinal incorrectly CVE-2009-0049 which allowed bypassing the validation of the certificate chain. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update eID-belgium-541. The...
openSUSE Security Update : eID-belgium (eID-belgium-541)
eID-belgium uses EVPVerifyFinal incorrectly CVE-2009-0049 which allowed bypassing the validation of the certificate chain. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update eID-belgium-541. The...
[SECURITY] Fedora 10 Update: mingw32-opensc-0.11.8-1.fc10
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
[SECURITY] Fedora 9 Update: opensc-0.11.8-1.fc9
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
[SECURITY] Fedora 10 Update: opensc-0.11.8-1.fc10
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
[SECURITY] Fedora 11 Update: opensc-0.11.8-1.fc11
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
Sql injection
Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to eventsview.php and the 2 id parameter to eventsclndrview.php...
[SECURITY] Fedora 10 Update: opensc-0.11.7-1.fc10
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
SUSE: Security Summary (SUSE-SR:2009:005)
The remote host is missing updates announced in advisory SUSE-SR:2009:005. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
openSUSE 10 Security Update : eID-belgium (eID-belgium-6009)
eID-belgium uses EVPVerifyFinal incorrectly CVE-2009-0049 which allowed bypassing the validation of the certificate chain. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update eID-belgium-6009. The...
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses
2008-016 multiple OpenSSL signature verification API misuse Description: Several functions inside the OpenSSL library incorrectly check the result after calling the EVPVerifyFinal function. This bug allows a malformed signature to be treated as a good signature rather than as an error. This issue...
CVE-2009-0049
Belgian eID middleware eidlib 2.6.0 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...
CVE-2009-0049
Belgian eID middleware eidlib 2.6.0 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...
Input validation
Belgian eID middleware eidlib 2.6.0 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...
CVE-2009-0049
CVE-2009-0049 affects belpic (the Belgian eID PKCS11 library) used by eidlib
barcodegen <= 2.0.0 (class_dir) Remote File Inclusion Vulnerability
No description provided by source. Name : barcodegen = 2.0.0 Remote File Inclusion Vulnerability Download From : http://www.barcodephp.com/processdownload.php?id=barcodegen.1d-php4.v2.0.0.zip Found By : Br0k3n H34rT Home Page : WwW.Sec-Code.CoM...
CVE-2008-2012
CVE-2008-2012 affects the PostSchedule 1.0 module for PostNuke. A SQL injection in index.php allows remote attackers to modify the database by supplying the eid parameter in an event action. Documented impact: arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH). No remediation details ...