PT-2016-4444

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.1.x before 4.1.5 RSA BSAFE Crypto-C Micro Edition CCME versions 4.0.x through 4.1.x before 4.1.3 RSA BSAFE Crypto-J versions prior to 6.2.1 RSA BSAFE SSL-J versions prior to 6.2.1...

PT-2015-4697

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C versions 2.8.9 and earlier Description The issue allows remote SSL servers to conduct...

PT-2015-4699

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C version 2.8.9 and earlier Description The issue makes it easier for remote attackers to condu...

PT-2015-4698

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE Crypto-J versions prior to 6.2 RSA BSAFE SSL-J versions prior to 6.2 RSA BSAFE SSL-C versions prior...

PT-2015-4700

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE SSL-C versions 2.8.9 and earlier Description The issue allows remote attackers to cause a denial of...

PT-2015-4701

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE Crypto-C Micro Edition Crypto-C ME versions prior to 4.0.4 RSA BSAFE Crypto-C Micro Edition Crypto-...

CVE-2015-0536: Undefined Security Weakness

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allow remote attackers to cause a denial of service daemon crash via a ClientKeyExchange messa...

CVE-2015-0533: Use of a Broken or Risky Cryptographic Algorithm

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message, a similar issue to CVE-2014-35...

CVE-2015-0534: Improper Certificate Validation

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based...

CVE-2015-0537: Integer Underflow (Wrap or Wraparound)

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition Crypto-C ME before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service...

CVE-2015-0535: Use of a Broken or Risky Cryptographic Algorithm

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, relate...

ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities

ESA-2012-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2012-029 CVE Identifier: CVE-2011-3389, CVE-2012-2110, CVE-2012-2131 Severity Rating: See below for scores for individual issues Affected Products: For the...

ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability

ESA-2013-045.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery aka “Lucky Thirteen” Vulnerability EMC Identifier: ESA-2013-045 CVE Identifier: CVE-2013-0169 Severity Rating: CVSS v2 Base Score: 2.6...

ESA-2012-029: RSA BSAFE(r) SSL-C Multiple Vulnerabilities

ESA-2012-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2012-029 CVE Identifier: CVE-2011-3389, CVE-2012-2110, CVE-2012-2131 Severity Rating: See below for scores for individual issues Affected Products: All versio...