Q-325: gnutls11 Cryptographic Weakness

Tags

security

Special Forums Cybersecurity Security Advisories (RSS) Q-325: gnutls11 Cryptographic Weakness

12-24-2007

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

Q-325: gnutls11 Cryptographic Weakness

A flaw in GNU TLS cryptographic package that could allow an attacker to generate a forged signature that GNU TLS will accept as valid. The risk is LOW. Could allow an attacker to generate a forged signature that will be accepted as valid.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Solaris

Assigning cryptographic resources to the control domain

Sun documentation suggests that we need to assign cryptographic resources to the control domain as part of the initial configuration. I searched the documentation to better understand the purpose of this and know recommendation/limitation. I am doing this for Netra T5220 and wondering if the...

2. UNIX for Advanced & Expert Users

Weakness in Perl CGI causes memory dump ??

I have discovered a curious phenomenon in GCI. I need some advice from someone far more adept. Is this a bug or potential security weakness? Context: Redhat 8.0 on xx86 (pentium 3) Apache 2.0, Perl 5.80 Background: I've been trying to harden a web application which accepts user uploaded...

LEARN ABOUT OPENSOLARIS

libgnutlsxx

libgnutls(3)							C Library Functions						      libgnutls(3)

NAME

       libgnutls -  a TLS library

DESCRIPTION

       GnuTLS  is  a  modern  C  library that implements the standard network security protocol Transport Layer Security (TLS), for use by network
       applications.

       It provides a secure layer, over a reliable transport layer.  Currently the GnuTLS library implements the proposed standards by the  IETF's
       TLS working group.

       A number of projects in Solaris Desktop such as Evolution, Pidgin, Ekiga and Vino depend on it.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWgnutls		   |
       +-----------------------------+-----------------------------+
       |Interface stability	     |Volatile			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       libgnutls-config(1), libgnutlsxx(3), libatsn1(3), attributes(5), gnome-interfaces(5)

       http://www.gnu.org/software/gnutls/manual/gnutls.html

NOTES

       Sun  does not guarantee the stability of these interfaces and does not recommend their use.  API documentation for these interfaces is pro-
       vided by the GNU community for those who wish to develop using these interfaces.

       Written by Jeff Cai, Sun Microsystems Inc., 2008.

SunOS 5.11							    31 Jul 2008 						      libgnutls(3)

Security Advisories (RSS)