EUVD-2008-7088

Malware in sbrugna...

EUVD-2008-7087

Malware in sbrugna...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

CVE-2008-7129

XySSL before 0.9 allows remote attackers to cause a denial of service infinite loop via an X.509 certificate that does not pass the RSA signature check during verification...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

Design/Logic Flaw

XySSL before 0.9 allows remote attackers to cause a denial of service infinite loop via an X.509 certificate that does not pass the RSA signature check during verification...

CVE-2008-7129

XySSL before 0.9 allows remote attackers to cause a denial of service infinite loop via an X.509 certificate that does not pass the RSA signature check during verification...

CVE-2008-7129

CVE-2008-7129 affects XySSL prior to 0.9. An attacker can induce a denial of service (infinite loop) by presenting an X.509 certificate that does not pass the RSA signature check during verification. This is the underlying cause of the issue as described in the connected records (NVD, etc.). The ...

CVE-2008-7129

XySSL before 0.9 allows remote attackers to cause a denial of service infinite loop via an X.509 certificate that does not pass the RSA signature check during verification...

CVE-2008-7128

The CVE-2008-7128 entry concerns the ssl_parse_client_key_exchange function in XySSL prior to 0.9, which does not protect against certain Bleichenbacher-style chosen-ciphertext attacks. The vulnerability allows remote attackers to recover keys via unspecified vectors. Documented impact is partial...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...