Cisco ASA MAC Authentication Flaw TLS Encryption Data Modification Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in the Cisco Adaptive Security Appliance Cavium due to a failure of the network encryption module firmware to properly verify the Message...

CVE-2015-4458

CVE-2015-4458 affects Cisco ASA and related products where the Cavium cryptographic-module TLS code fails to verify the MAC field. The root cause is an error in the Cavium firmware that allows a remote attacker to modify TLS packets without detection, enabling MITM content spoofing. Connected sou...

[Sanewall 1.0.0] Making sense of firewalling

Sanewall is a firewall builder for Linux which uses an elegant language abstracted to just the right level. This makes it powerful as well as easy to use, audit, and understand. It allows you to create very readable configurations even for complex stateful firewalls. Sanewall can be used for almo...

Debian: Security Advisory (DSA-849-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 849-1 (shorewall)

The remote host is missing an update to shorewall announced via advisory DSA 849-1. Supernaut noticed that shorewall, the Shoreline Firewall, could generate an iptables configuration which is significantly more permissive than the rule set given in the shorewall configuration, if MAC verification...

Debian DSA-849-1 : shorewall - programming error

'Supernaut' noticed that shorewall, the Shoreline Firewall, could generate an iptables configuration which is significantly more permissive than the rule set given in the shorewall configuration, if MAC verification are used in a non-default manner. When MACLISTDISPOSITION is set to ACCEPT in the...

[SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 849-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 849-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...

DSA-849-1 shorewall - programming error

Bulletin has no description...

CVE-2003-0078

ssl3getrecord in s3pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak timing discrepancy that may make it easier to launch cryptographic attacks that rely on distinguishing betwe...

Open SSL timing attack

Because of timing difference it's possible to distinguish between bad padding and a MAC verification error. It's also possible to recover RSA secret...