238 matches found
Gentoo Security Advisory GLSA 200804-27 (silc-toolkit silc-client silc-server)
The remote host is missing updates announced in advisory GLSA 200804-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: silc-irssi-client, silc-client
The remote host is missing an update to the system as announced in the referenced advisory. VID ff304c35-fb5b-11dc-91c1-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: silc-irssi-client, silc-client
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
GLSA-200804-27 : SILC: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200804-27 SILC: Multiple vulnerabilities Nathan G. Grennan reported a boundary error in SILC Toolkit within the silcfingerprint function in the file lib/silcutil/silcutil.c when passing overly long data, resulting in a stack-based...
SILC: Multiple vulnerabilities
Background SILC Secure Internet Live Conferencing protocol Toolkit is a software development kit for use in clients, SILC Server is a communication server, and SILC Client is an IRSSI-based text client. Description Nathan G. Grennan reported a boundary error in SILC Toolkit within the...
openSUSE 10 Security Update : silc-toolkit (silc-toolkit-5143)
A flaw in processing PKCS1-Messages could lead to a buffer overflow. Remote attackers could exploit that to crash the server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update silc-toolkit-5143...
CVE-2008-1552
The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...
CVE-2008-1552
The CVE-2008-1552 issue affects the SILC Toolkit family: the silc_pkcs1_decode function in silccrypt (silcpkcs1.c) enables remote code execution via a crafted PKCS#1 message. Affected products/versions are SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2, indicati...
CVE-2008-1552: Undefined Security Weakness
The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...
FreeBSD : silc -- pkcs_decode buffer overflow (ff304c35-fb5b-11dc-91c1-00e0815b8da8)
Core Security Technologies reports : A remote buffer overflow vulnerability found in a library used by both the SILC server and client to process packets containing cryptographic material may allow an un-authenticated client to executearbitrary code on the server with the privileges of the user...
SILC客户端及服务器密钥协商远程整数溢出漏洞
BUGTRAQ ID: 28373 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图像等。 SILC处理畸形的数据交换时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果要初始连接到SILC服务器，对等端（客户端、路由器和服务器）之间要执行相互认证并执行密钥协商协议以获得之后用于加密通讯的共享密钥。对等端之间的加密数据是通过以PKCS1 1.5标准编码的报文交换的。...
CORE-2007-1212: SILC pkcs_decode buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ SILC pkcsdecode buffer overflow Advisory Information Title: SILC pkcsdecode buffer overflow Advisory ID: CORE-2007-1212 Advisory URL:...
SILC server and client buffer overflow
Buffer overflow on PKCS 1 certificates parsing...
silc -- pkcs_decode buffer overflow
Core Security Technologies reports: A remote buffer overflow vulnerability found in a library used by both the SILC server and client to process packets containing cryptographic material may allow an un-authenticated client to executearbitrary code on the server with the privileges of the user...
SILC pkcs_decode buffer overflow
SILC pkcsdecode buffer overflow Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs-research Advisory Information Title: SILC pkcsdecode buffer overflow Advisory ID: CORE-2007-1212 Advisory URL: http://www.coresecurity.com/?action=item&id=2206 Date published:...
[SECURITY] Fedora 8 Update: libsilc-1.0.2-6.fc8
SILC Client Library libraries for SILC clients...
[SECURITY] Fedora 7 Update: libsilc-1.0.2-6.fc7
SILC Client Library libraries for SILC clients...
Code injection
Secure Internet Live Conferencing SILC Server before 1.1.1 allows remote attackers to cause a denial of service daemon crash via a NEWCLIENT packet without a nickname...
