CVE-2011-2736: Undefined Security Weakness

RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox...

PT-2011-4049

Name of the Vulnerable Software and Affected Versions RSA enVision versions 3.x through 4.x before 4 SP4 P3 Description The issue allows remote attackers to read arbitrary files via unspecified vectors, related to an arbitrary file retrieval vulnerability. Recommendations For versions 3.x through...

PT-2011-4048

Name of the Vulnerable Software and Affected Versions RSA enVision versions 4.x before 4 SP4 P3 Description The issue allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox, as cleartext administrative credentials are placed in...

Authentication flaw

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the...

CVE-2011-2733

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the...

CVE-2011-2733

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the...

CVE-2011-2733

CVE-2011-2733 affects EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3. Description: the system does not prevent reuse of authentication information within an active session, allowing remote authenticated users to bypass access restrict...

The Anatomy of the RSA Attack

The attack against RSA earlier this year has become a case study in how data breaches occur and how companies respond. In this video, Uri Rivner, Head of New Technologies, Identity Protection and Verification, at RSA discusses the attack, the aftermath and the lessons learned from it...

PT-2011-4046

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise AAOP versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3 Description The issue allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally...

CVE-2011-2733: Improper Authentication

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the...

EMC RSA Adaptive Authentication authentication data reuse (On-Premise)

No description provided...

ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication (On-Premise)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication On-Premise Advisories Updated August 11, 2011 Summary: An issue with Adaptive Authentication On-Premise was discovered which in certain circumstances...

CentOS Update for ecryptfs-utils CESA-2009:1307 centos5 i386

Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test CentOS Update for ecryptfs-utils CESA-2009:1307 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

[BSA-041] Security Update for xml-security-c

Russ Allbery uploaded new packages for xml-security-c which fixed the following security problems: CVE-2011-2516 It has been discovered that xml-security-c, an implementation of the XML Digital Signature and Encryption specifications, is not properly handling RSA keys of sizes on the order of 819...

Debian: Security Advisory (DSA-2277-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2277-1 (xml-security-c)

The remote host is missing an update to xml-security-c announced via advisory DSA 2277-1. OpenVAS Vulnerability Test $Id: deb22771.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2277-1 xml-security-c Authors: Thomas Reinke Copyright: Copyright c 2011 E-Sof...

Malicious PDF Attack Baiting Defense Industry Victims

There has been a spate of spear-phishing attacks against a number of high-profile targets in the last few months, including RSA and others, and that trend is continuing unabated. Researchers have come across a fresh attack using the familiar malicious PDF attachment that appears to be targeting...

Shibboleth XML Security Signature Key Parsing Denial of Service Vulnerability - Windows

Shibboleth is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Shibboleth XML Security Signature Key Parsing Denial of Service Vulnerability (Windows)

This host is installed with Shibboleth and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbshibbolethxmldosvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Shibboleth XML Security Signature Key Parsing Denial of Service Vulnerability Windows Authors: Sooraj KS...

Debian DSA-2277-1 : xml-security-c - stack-based buffer overflow

It has been discovered that xml-security-c, an implementation of the XML Digital Signature and Encryption specifications, is not properly handling RSA keys of sizes on the order of 8192 or more bits. This allows an attacker to crash applications using this functionality or potentially execute...