.:[ packet storm ]:.
                         
evolve or die
evolve or die

Archive Search Results for: renegotiating tls
Search Results: 1 - 25

 ///  File Name: Renegotiating_TLS.pdf
Description:
Paper called renegotiating tls. Transport Layer Security (TLS, RFC 5246 and previous, including SSL v3 and previous) is subject to a number of serious man-in-the-middle (MITM) attacks related to renegotiation. In general, these problems allow an MITM to inject an arbitrary amount of chosen plaintext into the beginning of the application protocol stream, leading to a variety of abuse possibilities. In particular, practical attacks against HTTPS client certificate authentication have been demonstrated against recent versions of both Microsoft IIS and Apache httpd on a variety of platforms and in conjunction with a variety of client applications. Cases not involving client certificates have been demonstrated as well.
Author:Marsh Ray,Steve Dispensa
Homepage:http://extendedsubset.com/?p=8
MD5 Checksum:c25776848ed92081ad22764f79a2daca

 ///  File Name: ssl-mitm.c
Description:
This is a proof of concept exploit for the man-in-the-middle vulnerability related to SSL/TLS.
Author:Pavel Kankovsky
Related File:Renegotiating_TLS.pdf
MD5 Checksum:7c6436c06bcd90517f2546bb095b48b3

 ///  File Name: openssl-0.9.5.tar.gz
Description:
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (tls v1) protocols with full-strength cryptography world-wide.
Author:The OpenSSL Team
Homepage:http://www.openssl.org/
MD5 Checksum:5b5458675df86e7d4a9756bfe6edef65

 ///  File Name: sendmail-tls-0.22.tar.gz
Description:
Sendmail-tls is a wrapper for Sendmail which allows for clients to make a secure (SSL) connection to their mailserver as described in RFC 2487. The connection is internally forwarded to sendmail and does not require sendmail to be running on port 25. Clients which support this currently are Netscape Messenger, Microsoft Outlook, and Microsoft Outlook Express.
Author:Jeremy Beker
Homepage:http://opensource.3gi.com/sendmail-tls/
Changes:Fix for a permissions bug in 'make install' and a new make step to help in creation of self-signed certficates.
MD5 Checksum:c70dcdecd1c1170f79897515052e18ae

 ///  File Name: sendmail-tls-0.21.tar.gz
Description:
Sendmail-tls is a wrapper for Sendmail which allows for clients to make a secure (SSL) connection to their mailserver as described in RFC 2487. The connection is internally forwarded to sendmail and does not require sendmail to be running on port 25. Clients which support this currently are Netscape Messenger, Microsoft Outlook, and Microsoft Outlook Express.
Author:Jeremy Beker
Homepage:http://opensource.3gi.com/sendmail-tls/
MD5 Checksum:f45d4abe221f25affac0a382f075eb73

 ///  File Name: sub72remover.zip
Description:
This program does what NAI, MCAFEE claim to be impossible, it detects _all_ versions (crypted, compressed) of Subseven 2 and cleans them from memory, from the hardisk, and removes _all_ autostart methods implented.
Author:Int 13h
Homepage:http://www.tlsecurity.net
MD5 Checksum:f1afaf20a66886d24cb65a049dc8b779

 ///  File Name: tlfaq.htm
Description:
FAQ on removing many different trojans. Updated frequently.
Author:Int 13h
Homepage:http://www.TLSecurity.net
MD5 Checksum:35f0e341307ff5f0f9e77b61902fd98c

 ///  File Name: Trojans.txt
Description:
A list of the TCP ports which trojans use.
Author:Int 13h
Homepage:http://www.TLSecurity.net
MD5 Checksum:f78c8dc681fbf7490bed73867b56004c

 ///  File Name: sms.152.ifconfig_ioctls
Description:
Vulnerability in ifconfig ioctls
MD5 Checksum:97d4e07df22ab2da73f1bfe4a7e11303

 ///  File Name: ms99-024
Description:
Patch Available for "Unprotected IOCTLs" Vulnerability
MD5 Checksum:b1330702f01a3a1f7d0c39ba74c14310

 ///  File Name: sendmail-tls-0.23.tar.gz
Description:
Sendmail-tls is a wrapper for Sendmail which allows for clients to make a secure (SSL) connection to their mailserver as described in RFC 2487.
Author:Jeremy Beker
Homepage:http://opensource.3gi.com/sendmail-tls/
Changes:A bug where an invalid MTA executable name would cause a silent failure was fixed.
MD5 Checksum:53c351cb4076decf5ac26ba6017d5da0

 ///  File Name: S-97-65.asc
Description:
Subject Vulnerability in ifconfig ioctls Date 27-Aug-97
MD5 Checksum:06ef8967aa87912aa224a8041647d1b8

 ///  File Name: h-99.sunos.ifconfig.ioctls.vulnerability.txt
Description:
h-99.sunos.ifconfig.ioctls.vulnerability.txt
MD5 Checksum:a9717f8f407ce76020f239f446f2e320

 ///  File Name: htls
Description:
htls
MD5 Checksum:5eba95e43f5f426c0861b6dd3b43f8df

 ///  File Name: TLSA2000012-1.txt
Description:
TurboLinux Security Announcement - xlockmore-4.16 and earlier contain a buffer overflow in -mode which allow an attacker to reveal arbitrary portions of xlock's address space including the shadow password file. TurboLinux security announcments here.
MD5 Checksum:f354baf6d2bf6034e0e6464cc2897041

 ///  File Name: sendmail-tls-0.24.tar.gz
Description:
Sendmail-tls is a wrapper for Sendmail which allows for clients to make a secure (SSL) connection to their mailserver as described in RFC 2487.
Author:Jeremy Beker
Homepage:http://opensource.3gi.com/sendmail-tls/
Changes:A new delay to work around a problem when running on some (fast) servers, the server would decide whether a client was using an MS or RFC compliant client too quickly.
MD5 Checksum:8fc3a9b9c6e853de101aa09e3004e3e0

 ///  File Name: TLSA2000020-1.txt
Description:
TurboLinux Security Announcement - Affected TurboLinux versions: 6.0.5 and earlier. Package: netscape-communicator 4.74 and earlier. There is a serious problem in netscape's java libraries that allows an applet to act as a web server on the client machine, exposing all files on the machine to the world. TurboLinux security announcments here.
MD5 Checksum:9229fa32b21fa43ee4db111c2c9e24d6

 ///  File Name: auto.txt
Description:
Auto.txt lists eleven known and unknown methods of starting programs upon bootup in Windows. Trojans, backdoors, and keyloggers often use these to restart themselves.
Homepage:http://www.tlsecurity.net
MD5 Checksum:3ebed47c33e095692bde2be83dcd1d1c

 ///  File Name: openssl-0.9.6.tar.gz
Description:
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (tls v1) protocols with full-strength cryptography world-wide.
Author:The OpenSSL Team
Homepage:http://www.openssl.org
Changes: This stable release includes bugfixes and extra documentation in addition to new sign and verify options to 'dgst' application, support for DER and PEM encoded messages in 'smime' application, and new 'rsautl' application (low level RSA utility.)
MD5 Checksum:4b407ab005b3846ec542eb8305823bca

 ///  File Name: mod_ssl-2.7.1-1.3.14.tar.gz
Description:
mod_ssl provides provides strong cryptography for the Apache 1.3 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (tls v1). It is based on the SSL/tls toolkit OpenSSL and supports all SSL/tls related functionality, including RSA and DSA/DH cipher support, X.509 CRL checking, etc. Additionally it provides special Apache related facilities like DBM and shared memory based inter-process SSL session caching. per-URL SSL session renegotiations, DSO support, etc.
Homepage:http://www.modssl.org
MD5 Checksum:99e05bd4ab7bd5c72fbb70bd8cfbf283

 ///  File Name: ssldump-0.9b1.tar.gz
Description:
sldump is an SSLv3/tls network protocol analyzer. It identifies TCP connections on the chosen network interface and attempts to interpret them as SSLv3/tls traffic. When it identifies SSLv3/tls traffic, it decodes the records and displays them in a textual form to stdout. If provided with the appropriate keying material, it will also decrypt the connections and display the application data traffic. Tested on Linux, Solaris, FreeBSD, and HP/UX.
Author:Eric Rescorla
Homepage:http://www.rtfm.com/ssldump/
MD5 Checksum:ace8f1b4f8bfa4cd494a3e546655c5e7

 ///  File Name: sslwrap206.tar.gz
Description:
sslwrap is a simple unix daemon that sits over any simple TCP service such as POP3, IMAP, SMTP, and encrypts all of the data on the connection using tls/SSL. It uses ssleay to support SSL version 2 and 3. It can run from inetd and encrypt data for services located on another computer. It works with the servers you already have, and does not require any modifications to your existing servers.
Homepage:http://www.rickk.com/sslwrap
Changes:This release fixes compatibility issues with OpenSSL 0.9.6, a missing err.h, and a missing MALLOC error.
MD5 Checksum:5a09f966f9114a108572f70a57bafdf7

 ///  File Name: mod_ssl-2.8.0-1.3.17.tar.gz
Description:
mod_ssl provides provides strong cryptography for the Apache 1.3 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (tls v1). It is based on the SSL/tls toolkit OpenSSL and supports all SSL/tls related functionality, including RSA and DSA/DH cipher support, X.509 CRL checking, etc. Additionally it provides special Apache related facilities like DBM and shared memory based inter-process SSL session caching. per-URL SSL session renegotiations, DSO support, etc.
Homepage:http://www.modssl.org
MD5 Checksum:3a158f3b5442cb8b7bee4a55851c3794

 ///  File Name: openssl-0.9.5a.tar.gz
Description:
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (tls v1) protocols with full-strength cryptography world-wide.
Author:The OpenSSL Team
Homepage:http://www.openssl.org/
Changes:This is revision a.
MD5 Checksum:8fcb6a8ba511ec8b54b95f267ef52cf0

 ///  File Name: mod_ssl-2.8.1-1.3.19.tar.gz
Description:
mod_ssl provides provides strong cryptography for the Apache 1.3 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (tls v1). It is based on the SSL/tls toolkit OpenSSL and supports all SSL/tls related functionality, including RSA and DSA/DH cipher support, X.509 CRL checking, etc. Additionally it provides special Apache related facilities like DBM and shared memory based inter-process SSL session caching. per-URL SSL session renegotiations, DSO support, etc.
Homepage:http://www.modssl.org
Changes:Now based on Apache 1.3.19. Conditionally adjusted source to build quietly under the latest OpenSSL 0.9.7-dev versions, new untested adjustments and fixes for the Win32 platform, a fix for the SSLCipherSuite example in httpd.conf-dist (the string EXP56 is actually EXPORT56, although internally the variable is named SSL_TXT_EXP56), and an extended FAQ.
MD5 Checksum:7d7cd5db29e1081f5c2fb97fc86c8213

<< Previous Results | 2 3 4 5 6 7 8 9 10 11 12  | Next Results >>

Interested in what other people are searching for? Check out the Packet Storm Storm Watch!

Archive Search Results for: renegotiating tls
Search Results: 1 - 25
Total Results: 318

 ///  Last 10 Files
  1. :· OIG_10-111_Aug10.pdf
  2. :· USN-978-1.txt
  3. :· USN-975-1.txt
  4. :· USN-985-1.txt
  5. :· ESA-2010-016.txt
  6. :· ESA-2010-015.txt
  7. :· ESA-2010-014.txt
  8. :· dsa-2106-1.txt
  9. :· fbsdpseudofs-nullpointer.txt
  10. :· cisco-sa-20100908-wlc.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· USN-978-1.txt
  2. :· USN-975-1.txt
  3. :· USN-985-1.txt
  4. :· ESA-2010-016.txt
  5. :· ESA-2010-015.txt
  6. :· ESA-2010-014.txt
  7. :· dsa-2106-1.txt
  8. :· fbsdpseudofs-nullpointer.txt
  9. :· cisco-sa-20100908-wlc.txt
  10. :· HPSBMA02574-SSRT100038.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· moaub-msoffice.txt
  2. :· moaub-sirang.txt
  3. :· adobe_cooltype_sing.rb.txt
  4. :· java_rmi_connection_impl.rb.txt
  5. :· fbsdpmap-racecondition.txt
  6. :· ZSL-2010-4963.txt
  7. :· zenphoto-sqlxss.txt
  8. :· openjournalsystem-xss.txt
  9. :· fcms-sql.txt
  10. :· enanocms-sql.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· DnsSpoofer.zip
  2. :· netrecon-1.78.tgz
  3. :· iexploder-1.7.tgz
  4. :· openca-tools-1.3.0.tar.gz
  5. :· malware_check_tool-1.2.zip
  6. :· hyenae-0.35-2.tar.gz
  7. :· joomlascan.tgz
  8. :· openscap-0.6.2.tar.gz
  9. :· suricata-1.0.2.tar.gz
  10. :· cvechecker-0.5.tar.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· OIG_10-111_Aug10.pdf
  2. :· ieee-1394-forensics.pdf
  3. :· itsecteam_shell.zip
  4. :· encfs-1.7.2.tgz
  5. :· pbania-jit-mitigations2010.pdf
  6. :· pam_shield-0.9.4.tar.gz
  7. :· armbinsh-shellcode.txt
  8. :· path-attacks.txt
  9. :· checksum-shellcode.txt
  10. :· nullconGoa2011-CFP.txt
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice