1618 matches found
CVE-2013-2944
strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature...
CVE-2013-2944
strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature...
CVE-2013-2944
CVE-2013-2944 affects strongSwan when using the openssl plugin for ECDSA verification, allowing remote authentication as another user via an invalid signature in versions 4.3.5–5.0.3. A patch was released (and patches applied in openSUSE updates) to fix the ECDSA signature verification issue; ups...
Debian DSA-2665-1 : strongswan - authentication bypass
Kevin Wojtysiak discovered a vulnerability in strongSwan, an IPsec based VPN solution. When using the OpenSSL plugin for ECDSA based authentication, an empty, zeroed or otherwise invalid signature is handled as a legitimate one. An attacker could use a forged signature to authenticate like a...
[SECURITY] [DSA 2665-1] strongswan security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2665-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 30, 2013 http://www.debian.org/security/faq -...
Security fix for the ALT Linux 5 package strongswan version 4.3.7-alt1.M51.1
April 30, 2013 Michael Shigorin 4.3.7-alt1.M51.1 - applied the upstream provided patch to fix CVE-2013-2944 ECDSA signature vulnerability if openssl backend is loaded...
Security fix for the ALT Linux 6 package strongswan version 4.6.4-alt1.M60T.1
April 30, 2013 Michael Shigorin 4.6.4-alt1.M60T.1 - applied the upstream provided patch to fix CVE-2013-2944 ECDSA signature vulnerability if openssl backend is loaded...
Security fix for the ALT Linux 7 package strongswan version 5.0.4-alt1
April 30, 2013 Michael Shigorin 5.0.4-alt1 - 5.0.4: CVE-2013-2944 fix ECDSA signature vulnerability if openssl backend is loaded...
strongSwan -- ECDSA signature verification issue
strongSwan security team reports: If the openssl plugin is used for ECDSA signature verification an empty, zeroed or otherwise invalid signature is handled as a legitimate one. Both IKEv1 and IKEv2 are affected. Affected are only installations that have enabled and loaded the OpenSSL crypto backe...
DSA-2665-1 strongswan - authentication bypass
Bulletin has no description...
Debian Security Advisory DSA 2665-1 (strongswan - authentication bypass)
Kevin Wojtysiak discovered a vulnerability in strongSwan, an IPsec based VPN solution. When using the OpenSSL plugin for ECDSA based authentication, an empty, zeroed or otherwise invalid signature is handled as a legitimate one. An attacker could use a forged signature to authenticate like a...
Debian: Security Advisory (DSA-2665-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 11.1 Security Update : strongswan (SAT Patch Number 6333)
This update fixed a security issue in strongswan's 'gmp' plugin which could be exploited by attackers to forge RSA signature/certificate to authenticate as any legitimate user. CVE-2012-2388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
SuSE Update for update openSUSE-SU-2012:0691-1 (update)
Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201206911.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for update openSUSE-SU-2012:0691-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...
openSUSE: Security Advisory for update (openSUSE-SU-2012:0691-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for strongswan FEDORA-2012-8815
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for strongswan FEDORA-2012-8815
Check for the Version of strongswan OpenVAS Vulnerability Test Fedora Update for strongswan FEDORA-2012-8815 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Debian DSA-2483-1 : strongswan - authentication bypass
An authentication bypass issue was discovered by the Codenomicon CROSS project in strongSwan, an IPsec-based VPN solution. When using RSA-based setups, a missing check in the gmp plugin could allow an attacker presenting a forged signature to successfully authenticate against a strongSwan...
