PT-2015-4700

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C versions 2.8.9 and earlier Description The issue allows remote attackers to cause a denial of...

PT-2015-4701

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE Crypto-C Micro Edition Crypto-C ME versions prior to 4.0.4 RSA BSAFE Crypto-C Micro Edition Crypto-...

CVE-2015-0536: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allow remote attackers to cause a denial of service daemon crash via a ClientKeyExchange messa...

CVE-2015-0533: Use of a Broken or Risky Cryptographic Algorithm

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message, a similar issue to CVE-2014-35...

CVE-2015-0534: Improper Certificate Validation

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based...

CVE-2015-0537: Integer Underflow (Wrap or Wraparound)

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition Crypto-C ME before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service...

CVE-2015-0535: Use of a Broken or Risky Cryptographic Algorithm

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, relate...

ESA-2014-158: RSA BSAFE® Micro Edition Suite and SSL-J Triple Handshake Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-158: RSA BSAFE® Micro Edition Suite and SSL-J Triple Handshake Vulnerability EMC Identifier: ESA-2014-158 CVE Identifier: CVE-2014-4630 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected Products: RSA BSAFE Micro...

RSA BSAFE Micro Edition Suite/SSL-J Security Bypass Vulnerability

The RSA BSAFE security software products provide developers with a complete set of solutions to help them achieve a variety of security goals for their applications. A security bypass vulnerability exists in RSA BSAFE Micro Edition Suite/SSL-J due to the program failing to properly validate an SS...

CVE-2014-4630

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session...

CVE-2014-4630

The CVE-2014-4630 vulnerability affects EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4, where the server’s X.509 certificate is not consistently verified during renegotiation, enabling a triple-handshake MITM attack to access or modify TLS session data...

CVE-2014-4630: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session...

PT-2014-6036

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.5 RSA BSAFE SSL-J versions prior to 6.1.4 Description The issue allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple...

ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks

ESA-2012-032.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST Browser Exploit Against SSL/TLS attacks EMC Identifier: ESA-2012-032 CVE Identifier: CVE-2011-3389 Severity Rating: CVSS v2 Base Score: 4.3...

CVE-2014-0636

RSA BSAFE Micro Edition Suite (MES) is affected: versions 3.2.x prior to 3.2.6 and 4.0.x prior to 4.0.5 do not properly validate X.509 certificate chains, enabling MITM via crafted certificate chains. The vulnerability impacts SSL certificate chain processing and could allow attackers to spoof se...

CVE-2014-0636: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain...

PT-2014-3731

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 3.2.x through 3.2.5 EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.4 Description The issue is related to the improper validation of X.509 certificate chains, which allows...

RSA BSAFE Micro Edition Suite证书链处理拒绝服务漏洞

Bugtraq ID:66388 CVE ID:CVE-2014-0628 RSA BSAFE安全软件产品为开发商提供了一套完整的解决方案，帮助他们实现其应用程序的各种安全目标。 RSA BSAFE Micro Edition Suite处理某些证书链时存在错误，允许恶意用户利用漏洞使应用程序崩溃。 0 RSA BSAFE RSA BSAFE Micro Edition Suite 4.0.5已经修复该漏洞，建议用户下载更新： http://www.rsa.com/node.aspx?id=1204...

EMC RSA BSAFE Micro Edition DoS

Server crash on certificate check...

ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability

ESA-2014-011.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability EMC Identifier: ESA-2014-011 CVE Identifier: CVE-2014-0628 Severity Rating: CVSS v2 Base Score: 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C Affected Products: RSA BSAFE Micro...