Archive for February, 2004

MS ASN.1 Buffer Overflow Vulnerabilities

February 11, 2004

Uma vulnerabilidade altamente crítica foi anunciada hoje pela Microsoft que afeta bibliotecas que são usadas para processar dados codificados da ASN.1. A ASN.1 é o padrão que define a maneira na qual os dados em certificados digital são codificados. Cada aplicação que faz uso do MSASN1.DLL ou CRYPT32.DLL (para mauseio de certificados digitais) é considerada [...]

Novell & Oracle vulnerabilities and new updates for Feb, 09 2004

February 9, 2004

N-Stalker has made available the latest database update (v120) for N-Stealth Web Security Scanner. This updates are available for the N-Stealth 5.5 version. If you are currently using an old version, please, contact us at: E-mail: [email protected] (24hs) or Phone: +55-11-3675-7093 (9am to 18pm GMT-0300) Download: https://secure.nstalker.com/customercenter/release.php This release has included the following vulnerabilities: – [...]

MS ASN.1 Buffer Overflow Vulnerabilities

February 2, 2004

A high critical vulnerability was announced today by Microsoft that affect libraries which are used to process ASN.1 encoded data. ASN.1 is the standard which defines how data in digital certificates is encoded. Every application that makes use of MSASN1.DLL or CRYPT32.DLL (for digital certificates handling) is considered to be vulnerable. Some of it includes: [...]