9632 matches found
Debian DSA-288-1 : openssl - several vulnerabilities
Researchers discovered two flaws in OpenSSL, a Secure Socket Layer SSL library and related cryptographic tools. Applications that are linked against this library are generally vulnerable to attacks that could leak the server's private key or make the encrypted session decryptable otherwise. The...
amap (NASL wrapper)
This plugin runs amap to find open ports and identify applications on the remote host. See the section 'plugins options' to configure it. TRUSTED...
GLSA-200408-08 : Cfengine: RSA Authentication Heap Corruption
The remote host is affected by the vulnerability described in GLSA-200408-08 Cfengine: RSA Authentication Heap Corruption Two vulnerabilities have been found in cfservd. One is a buffer overflow in the AuthenticationDialogue function and the other is a failure to check the proper return value of...
Cfengine Detection
Cfengine is a language-based system for testing and configuring Unix systems attached to a TCP/IP network. TRUSTED...
SSH settings
This plugin initializes the SSH credentials as set by the user. To set the credentials, edit your scan policy and go to the section 'Credentials'. TRUSTED...
Nikto (NASL wrapper)
This plugin runs Nikto2, an open source GPL web server scanner used to perform comprehensive tests for multiple issues, such as outdated server versions, potentially dangerous files or programs, version specific problems, various configuration items, etc. See the section 'plugins options' to...
CVE-2004-1701
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication...
gnutls -- certificate chain verification DoS
Patric Hornik reports on a problem in the certificate chain verification procedures of GnuTLS that may result in a denial-of-service vulnerability: The certificate chain should be verified from last root certificate to the first certificate. Otherwise a lot of unauthorized CPU processing can be...
Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:069)
A vulnerability in racoon prior to version 20040408a would allow a remote attacker to cause a DoS memory consumption via an ISAKMP packet with a large length field. Another vulnerability in racoon was discovered where, when using RSA signatures, racoon would validate the X.509 certificate but wou...
Mandrake Linux Security Advisory : openssl (MDKSA-2003:035)
Researchers discovered a timing-based attack on RSA keys that OpenSSL is generally vulnerable to, unless RSA blinding is enabled. Patches from the OpenSSL team have been applied to turn RSA blinding on by default. An extension of the 'Bleichenbacher attack' on RSA with PKS 1 v1.5 padding as used ...
osTicket Detection
osTicket was detected on the remote host. TRUSTED...
SUSE-SA:2003:024: openssl
The remote host is missing the patch for the advisory SUSE-SA:2003:024 openssl. Researchers from the University of Stanford have discovered certain weaknesses in OpenSSL's RSA decryption algorithm. It allows remote attackers to compute the private RSA key of a server by observing its timing...
RHEL 2.1 : openssl (RHSA-2003:102)
Updated OpenSSL packages are available that fix a potential timing-based attack and a modified Bleichenbacher attack. Updated 30 May 2003 Added missing i686 packages. OpenSSL is a commercial-grade, full-featured, open source toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport...
Global variable settings
This plugin configures miscellaneous global variables for Nessus plugins. It does not perform any security checks but may disable or change the behavior of others. TRUSTED...
CVE-2004-0155
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509...
CVE-2004-0155
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509...
Important: Red Hat Security Advisory: ipsec-tools security update
An updated ipsec-tools package that fixes vulnerabilities in racoon the ISAKMP daemon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. With versions of ipsec-tools prior to 0.2.3, it was possible for an attacker to cause unauthorized deletio...
security flaw
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509...
CVE-2004-0155
CVE-2004-0155 affects the KAME IKE daemon racoon (IPsec-tools). During Phase 1 RSA-signature authentication, racoon validates the X.509 certificate but does not verify the RSA signature, enabling a remote attacker who presents a valid, trusted X.509 cert to perform man-in-the-middle attacks or es...
