S-296: GnuTLS Security Update


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-296: GnuTLS Security Update
# 1  
Old 05-22-2008
S-296: GnuTLS Security Update

Flaws were found in the way GnuTLS handles malicious client connections and it is possible to leverage this flaw to execute arbitrary code. The risk is MEDIUM. A malicious remote client could sent a specially crafted request to a service using GnuTLS that could cause the service to crash and it may be possible to execute arbitrary code but they have been unable to prove this at the time of releasing this advisory.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
gnutls_strerror(3)						      gnutls							gnutls_strerror(3)

NAME
gnutls_strerror - Returns a string with a description of an error SYNOPSIS
#include <gnutls/gnutls.h> const char * gnutls_strerror(int error); ARGUMENTS
int error is a GnuTLS error code, a negative value DESCRIPTION
This function is similar to strerror(). Differences: it accepts an error number returned by a gnutls function; In case of an unknown error a descriptive string is sent instead of NULL. Error codes are always a negative value. RETURNS
A string explaining the GnuTLS error message. REPORTING BUGS
Report bugs to <bug-gnutls@gnu.org>. GnuTLS home page: http://www.gnu.org/software/gnutls/ General help using GNU software: http://www.gnu.org/gethelp/ COPYRIGHT
Copyright (C) 2008 Free Software Foundation. Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. SEE ALSO
The full documentation for gnutls is maintained as a Texinfo manual. If the info and gnutls programs are properly installed at your site, the command info gnutls should give you access to the complete manual. gnutls 2.8.6 gnutls_strerror(3)