Q-325: gnutls11 Cryptographic Weakness

Tags

security

Special Forums Cybersecurity Security Advisories (RSS) Q-325: gnutls11 Cryptographic Weakness

12-24-2007

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

Q-325: gnutls11 Cryptographic Weakness

A flaw in GNU TLS cryptographic package that could allow an attacker to generate a forged signature that GNU TLS will accept as valid. The risk is LOW. Could allow an attacker to generate a forged signature that will be accepted as valid.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Solaris

Assigning cryptographic resources to the control domain

Sun documentation suggests that we need to assign cryptographic resources to the control domain as part of the initial configuration. I searched the documentation to better understand the purpose of this and know recommendation/limitation. I am doing this for Netra T5220 and wondering if the...

2. UNIX for Advanced & Expert Users

Weakness in Perl CGI causes memory dump ??

I have discovered a curious phenomenon in GCI. I need some advice from someone far more adept. Is this a bug or potential security weakness? Context: Redhat 8.0 on xx86 (pentium 3) Apache 2.0, Perl 5.80 Background: I've been trying to harden a web application which accepts user uploaded...

LEARN ABOUT SUSE

gnutls-cli-debug

gnutls-cli-debug(1)					      General Commands Manual					       gnutls-cli-debug(1)

NAME

       gnutls-cli-debug - GNU TLS test client, with verbose output

SYNOPSIS

       gnutls-cli-debug [options] hostname

DESCRIPTION

       Simple client program to set up a TLS connection to some other computer.  Like gnutls-cli(1), it sets up a TLS connection and forwards data
       from the standard input to the socket.  Any information about the TLS control connection is printed to standard error.

OPTIONS

       -d, --debug integer
	      Enable debugging.

       -p, --port integer
	      The port to connect to.

       -h, --help
	      Prints a short reminder of the command line options.

       -v, --verbose
	      Even more verbose output.

SEE ALSO

       gnutls-cli(1), gnutls-serv(1)

AUTHOR

       Nikos Mavroyanopoulos <nmav@gnutls.org> and others; see /usr/share/doc/gnutls-bin/AUTHORS for a complete list.

       This manual page was written by Ivo Timmermans <ivo@debian.org>, for the Debian GNU/Linux system (but may be used by others).

								 December 1st 2003					       gnutls-cli-debug(1)

Security Advisories (RSS)