SuSE 11.1 Security Update : libopenssl (SAT Patch Number 6521)

This update adds libopenssl098-hmac packages, that, when installed, will enforce FIPS 140-2 self-test being run upon first use of the library. If FIPS mode is enforced, these new packages are required in order to enable FIPS mode successfully. The update also imposes limits on the parameters of a...

Fedora 18 : mysql-5.5.28-2.fc18 (2012-19868)

Add patch for CVE-2012-5611 - Widen DH key length from 512 to 1024 bits to meet minimum requirements of FIPS 140-2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

httpd security, bug fix, and enhancement update

2.2.3-74.0.1.el5 - fix modssl always performing full renegotiation Joe Jin orabug 12423387 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-74 - further %post scriptlet fix 752618, 867736 2.2.3-73 - fix %post scriptlet output 752618,...

Fedora 17 : mysql-5.5.28-2.fc17 (2012-19833)

Add patch for CVE-2012-5611 - Widen DH key length from 512 to 1024 bits to meet minimum requirements of FIPS 140-2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

MatrixDAR - First Military Grade Encryption for Android

AuthenTec, a leading provider of mobile and network security, today introduced a new security offering that provides military-grade encryption to data stored on today's Android smartphones and tablets without sacrificing device performance. AuthenTec's MatrixDARTM for Android meets the stringent...

Scientific Linux Security Update : openssl on SL6.x i386/x86_64

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength, general purpose cryptography library. A buffer over-read flaw was discovered in the way OpenSSL parsed the Certificate Status Request TLS extensions i...

Cerberus FTP 3.0.6 Denial Of Service

Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP...

Cerberus FTP server 3.0.6 - Denial of Service

Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP...

Cerberus FTP server 3.0.6 - Denial of Service

Cerberus FTP server 3.0.6 - Denial of Service Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code ==============...

Cerberus FTP server 3.0.6 Pre-Auth DoS

Exploit for unknown platform in category dos / poc ====================================== Cerberus FTP server 3.0.6 Pre-Auth DoS ====================================== Title: Cerberus FTP server 3.0.6 Pre-Auth DoS CVE-ID: OSVDB-ID: Author: Francis Provencher Published: 2009-09-30 Verified: yes vi...

Cerberus FTP 3.0.1 (ALLO) Remote Overflow DoS Exploit (meta)

No description provided by source. Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional SP2 crash: N/A Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

Cerberus FTP 3.0.1 - ALLO Remote Overflow Denial of Service (Metasploit)

Cerberus FTP 3.0.1 - ALLO Remote Overflow Denial of Service Metasploit Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional SP2 crash: N/A Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code...

Cerberus FTP 3.0.1 Denial Of Service

Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional SP2 crash: N/A Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP Server is a secure...

Cerberus FTP 3.0.1 - 'ALLO' Remote Overflow Denial of Service (Metasploit)

Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional SP2 crash: N/A Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP Server is a secure...

Cerberus FTP 3.0.1 (ALLO) Remote Overflow DoS Exploit (meta)

Exploit for unknown platform in category dos / poc ============================================================ Cerberus FTP 3.0.1 ALLO Remote Overflow DoS Exploit meta ============================================================ Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional...

Terminal Services Encryption Level is not FIPS-140 Compliant

Binary data fipsrdp.nbin...

OpenSSL FIPS Object Module fails to properly generate random seeds

Overview The OpenSSL FIPS Module fails to perform auto-seeding, which may allow an attacker to predict pseudo-randomly generated data. Description OpenSSL is a toolkit that provides SSL and TLS protocols as well as a general purpose cryptography library. The OpenSSL FIPS Object Module provides an...

AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit

Exploit for unknown platform in category remote exploits ======================================================== AEP SmartGate 4.3b GET Arbitrary File Download Exploit ======================================================== / prdelka-vs-AEP-smartgate ======================== Smartgate is an...

AEP SmartGate 4.3b - 'GET' Arbitrary File Download

/ prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, law enforcement, homeland security, public safety,...