CVE-2012-2388

The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a 1 empty or 2 zeroed RSA signature, aka "RSA signature verification vulnerability."...

Experts Say Attack on Crypto Tokens is Serious, But Not Catastrophic

A group of international academic researchers has made a major advance in the efficiency of a known cryptographic attack on some kinds of crypto hardware, enabling them to extract sensitive keys from tokens such as RSA SecurID and Aladdin eToken devices within 20 minutes. However, experts say tha...

RSA SecurIDs Get Cracked In 13 Minutes

RSA SecurIDs Get Cracked In 13 Minutes Major corporations, government agencies, and small businesses all hand out RSA SecurID fob keychains to employees so that they can log in to their systems for security reasons and If you're used to seeing a device like this on a daily basis, you probably...

Microsoft Releases Automatic Updater for Certificate Revocation Lists, Plans to Invalidate Short RSA Keys

As part of its response to the Flame malware and its usage of a forged Microsoft certificate to sign malicious files, Microsoft has changed the way that Windows handles certificates, releasing an automatic updater function that will recognize and flag untrusted certificates. The new functionality...

F5 BIG-IP Remote Root Authentication Bypass Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/python Title: F5 BIG-IP Remote Root Authentication Bypass Vulnerability py Quick script written by Dave Kennedy ReL1K for F5 authentication root bypass http://www.secmaniac.com import subprocess,os filewrite = file"priv.key", "w"...

F5 BIG-IP - Authentication Bypass

F5 BIG-IP - Authentication Bypass !/usr/bin/python Title: F5 BIG-IP Remote Root Authentication Bypass Vulnerability py Quick script written by Dave Kennedy ReL1K for F5 authentication root bypass http://www.secmaniac.com import subprocess,os filewrite = file"priv.key", "w"...

Fedora 17 : strongswan-4.6.4-1.fc17 (2012-8815)

RSA signature verification vulnerability CVE-2012-2388 Fix bug 821733 and update to new upstream version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

F5 BIG-IP SSH Private Key Exposure

F5 ships a public/private key pair on BIG-IP appliances that allows passwordless authentication to any other BIG-IP box. Since the key is easily retrievable, an attacker can use it to gain unauthorized remote access as root. Module Options msf use exploit/linux/ssh/f5/bigipknownprivkey msf...

Fedora 16 : strongswan-4.6.4-1.fc16 (2012-8821)

RSA signature verification vulnerability CVE-2012-2388 Fix bug 821733 and update to new upstream version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

SOL13607 - Hosts may generate weak RSA keys under low entropy conditions

A recent study, linked in the Supplemental Information section, has revealed that when a system generates new RSA keys under low-entropy conditions, such as during the first system boot, the resulting keys may not be cryptographically strong. During its first boot, the BIG-IP system generates...

update for strongswan (important)

Strongswan's gmp plugin could treat empty RSA signature as valid ones...

SuSE 10 Security Update : strongswan (ZYPP Patch Number 8138)

This update fixed a security issue in strongswan's 'gmp' plugin which could be exploited by attackers to forge RSA signature/certificate to authenticate as any legitimate user. CVE-2012-2388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

[SECURITY] [DSA 2483-1] strongswan security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2483-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez May 31, 2012 http://www.debian.org/security/faq -...

Security fix for the ALT Linux 7 package strongswan version 4.6.4-alt1

June 1, 2012 Michael Shigorin 4.6.4-alt1 - 4.6.4 + CVE-2012-2388 is fixed an attacker presenting a forged signature and/or certificate can authenticate as any legitimate user provided that "gmp" plugin is in use and a connection definition using RSA auth exists...

Security fix for the ALT Linux 6 package strongswan version 4.6.4-alt1

June 1, 2012 Michael Shigorin 4.6.4-alt1 - 4.6.4 + CVE-2012-2388 is fixed an attacker presenting a forged signature and/or certificate can authenticate as any legitimate user provided that "gmp" plugin is in use and a connection definition using RSA auth exists...

[SECURITY] [DSA 2483-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2483-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez May 31, 2012 http://www.debian.org/security/faq -...

DSA-2483-1 strongswan - authentication bypass

Bulletin has no description...

Debian: Security Advisory (DSA-2483-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2483-1 (strongswan)

The remote host is missing an update to strongswan announced via advisory DSA 2483-1. OpenVAS Vulnerability Test $Id: deb24831.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2483-1 strongswan Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : openssl vulnerabilities (USN-1451-1)

Ivan Nestlerode discovered that the Cryptographic Message Syntax CMS and PKCS 7 implementations in OpenSSL returned early if RSA decryption failed. This could allow an attacker to expose sensitive information via a Million Message Attack MMA. CVE-2012-0884 It was discovered that an integer...