CVE-2017-3731

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

CVE-2017-3731 Truncated packet could crash via OOB read

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

Threat Outbreak Alert RuleID29002: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53709 First Published: 2017 May 4 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29002 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28827: Email Messages Distributing Malicious Software on May 3, 2017

Medium Alert ID: 53680 First Published: 2017 May 3 15:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28827 may contain the following files: Name | Size ...

Insecure Cipher

github.com/go-macaron/macaron uses an insecure cipher for AES keys. The library uses MD5 to create AES keys which is considered insecure since MD5 is vulnerable to rainbow table attacks...

Threat Outbreak Alert RuleID28919: Email Messages Distributing Malicious Software on May 1, 2017

Medium Alert ID: 53669 First Published: 2017 May 1 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28919 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28964: Email Messages Distributing Malicious Software on May 1, 2017

Medium Alert ID: 53675 First Published: 2017 May 1 16:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28964 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28959: Email Messages Distributing Malicious Software on May 1, 2017

Medium Alert ID: 53673 First Published: 2017 May 1 16:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28959 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28955: Email Messages Distributing Malicious Software on May 1, 2017

Medium Alert ID: 53672 First Published: 2017 May 1 16:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28955 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28935: Email Messages Distributing Malicious Software on May 1, 2017

Medium Alert ID: 53670 First Published: 2017 May 1 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28935 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28894: Email Messages Distributing Malicious Software on April 28, 2017

Medium Alert ID: 53653 First Published: 2017 May 1 13:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28894 may contain the following files: Name | Size ...

EulerOS 2.0 SP1 : openssl (EulerOS-SA-2017-1029)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-b...

Threat Outbreak Alert RuleID28945: Email Messages Distributing Malicious Software on April 28, 2017

Medium Alert ID: 53655 First Published: 2017 April 28 18:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28945 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28950: Email Messages Distributing Malicious Software on April 28, 2017

Medium Alert ID: 53657 First Published: 2017 April 28 18:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28950 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28878: Email Messages Distributing Malicious Software on April 28, 2017

Medium Alert ID: 53643 First Published: 2017 April 28 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28878 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28914: Email Messages Distributing Malicious Software on April 27, 2017

Medium Alert ID: 53593 First Published: 2017 April 27 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28914 may contain the following files: Name | Si...

Code injection

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...

CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...

CVE-2017-5186

CVE-2017-5186 affects Novell iManager and NetIQ eDirectory (versions listed in the CVE) and is due to the use of the deprecated MD5 hashing algorithm in a communications certificate. The connected SUSE entry reiterates the same affected products and patch level references. The provided sources do...

CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...