Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
securityvulnsMICROSOFTSECURITYVULNS:VULN:10917
HistoryJun 09, 2010 - 12:00 a.m.

Microsoft .Net XML signing protection bypass

2010-06-0900:00:00
MICROSOFT
vulners.com
14
JSON

Only part of signature is compared in case of incomplete HMAC.

CPENameOperatorVersion
windowseq7

Related

nessus 71
checkpoint_advisories 2
openvas 67
debian 7
securityvulns 7
prion 2
redhat 6
ubuntucve 2
veracode 1
fedora 6
osv 2
mskb 1
cert 1
cve 2
github 1
centos 2
debiancve 2
freebsd 2
oraclelinux 2
ubuntu 3
ibm 3
suse 3
threatpost 1
gentoo 2
oracle 1
nessus
nessus
Solaris 10 (x86) : 141710-03
2018-03-12 00:00:00
Fedora 10 : xml-security-c-1.5.1-1.fc10 (2009-8121)
2009-08-01 00:00:00
Fedora 11 : xmlsec1-1.2.12-1.fc11 (2009-8473)
2009-08-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft XML Signature HMAC Truncation Bypass (MS10-041; CVE-2009-0217)
2010-06-08 00:00:00
Microsoft XML Signature HMAC Truncation Bypass (MS10-041) - Ver2 (CVE-2009-0217)
2015-03-26 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:269 (mono)
2009-10-19 00:00:00
CentOS Update for xmlsec1 CESA-2009:1428 centos5 i386
2011-08-09 00:00:00
Mandrake Security Advisory MDVSA-2009:267 (xmlsec1)
2009-10-19 00:00:00
debian
debian
[Backports-security-announce] Security Update for xml-security-c
2009-08-06 08:37:46
[SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery
2009-08-02 13:48:02
[Backports-security-announce] Security Update for xml-security-c
2009-08-06 08:38:10
securityvulns
securityvulns
Microsoft Security Bulletin MS10-041 - Important Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343)
2010-06-09 00:00:00
CVE-2013-2155: Apache Santuario C++ denial of service vulnerability
2013-07-01 00:00:00
OpenJDK multiple security vulnerabilities
2009-08-11 00:00:00
prion
prion
Authentication flaw
2009-07-14 23:30:00
Design/Logic Flaw
2013-08-20 22:55:00
redhat
redhat
(RHSA-2009:1428) Moderate: xmlsec1 security update
2009-09-08 00:00:00
(RHSA-2009:1649) Moderate: JBoss Enterprise Application Platform 4.3.0.CP07 update
2009-12-09 00:00:00
(RHSA-2009:1201) Important: java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
ubuntucve
ubuntucve
CVE-2009-0217
2009-07-14 00:00:00
CVE-2013-2155
2013-08-20 00:00:00
veracode
veracode
Authentication Bypass
2020-04-10 00:35:27
fedora
fedora
[SECURITY] Fedora 10 Update: xml-security-c-1.5.1-1.fc10
2009-07-31 17:59:26
[SECURITY] Fedora 11 Update: xmlsec1-1.2.12-1.fc11
2009-08-11 22:33:07
[SECURITY] Fedora 11 Update: xml-security-c-1.5.1-1.fc11
2009-07-31 18:04:52
osv
osv
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
2022-05-02 03:13:38
openoffice.org - several
2010-02-12 00:00:00
mskb
mskb
MS10-041: Vulnerabilities in the Microsoft .NET Framework that could allow tampering
2012-05-08 22:34:55
cert
cert
XML signature HMAC truncation authentication bypass
2009-07-14 00:00:00
cve
cve
CVE-2009-0217
2009-07-14 23:30:00
CVE-2013-2155
2013-08-20 22:55:00
github
github
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
2022-05-02 03:13:38
centos
centos
xmlsec1 security update
2009-09-09 00:48:06
java security update
2009-08-09 04:11:10
debiancve
debiancve
CVE-2009-0217
2009-07-14 23:30:00
CVE-2013-2155
2013-08-20 22:55:00
freebsd
freebsd
mono -- XML signature HMAC truncation spoofing
2009-07-15 00:00:00
openoffice.org -- multiple vulnerabilities
2006-08-24 00:00:00
oraclelinux
oraclelinux
xmlsec1 security update
2009-09-09 00:00:00
java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
ubuntu
ubuntu
Mono vulnerabilities
2009-08-26 00:00:00
OpenOffice.org vulnerabilities
2010-02-24 00:00:00
OpenJDK vulnerabilities
2009-08-11 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in Apache XML Security for Java affects IBM Tivoli Business Service Manager (CVE-2013-4517, CVE-2013-2172, CVE-2009-0217, CVE-2021-40690)
2022-10-06 04:39:35
Security Bulletin: Multiple vulnerabilities in Apache Santuario XML Security for Java affect IBM InfoSphere Information Server
2022-10-14 22:24:44
Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ
2020-02-20 12:42:12
suse
suse
remote code execution in OpenOffice_org
2010-03-16 16:11:32
remote code execution in java-1_6_0-ibm
2009-11-04 15:26:34
remote code execution in java-1_6_0-ibm
2010-01-12 17:47:21
threatpost
threatpost
OpenOffice Zaps Six Security Bugs
2010-02-18 15:09:26
gentoo
gentoo
Mono: Multiple vulnerabilities
2012-06-21 00:00:00
OpenOffice, LibreOffice: Multiple vulnerabilities
2014-08-31 00:00:00
oracle
oracle
09-07 CPU Advisory
2009-07-14 00:00:00
JSON
Related for SECURITYVULNS:VULN:10917
nessus71checkpoint_advisories2openvas67debian7securityvulns7prion2redhat6ubuntucve2veracode1fedora6osv2mskb1cert1cve2github1centos2debiancve2freebsd2oraclelinux2ubuntu3ibm3suse3threatpost1gentoo2oracle1