jetlib.sec » Tags » authentication-mechanisms

Feeds

133340 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

30 items tagged "authentication mechanisms"

Related tags: strong authentication [+], pkcs 11 [+], security [+], postfix [+], cyrus sasl library [+], cyrus sasl [+], tar [+], project [+], ikev [+], ubuntu [+], thomas jarosch [+], system security services [+], system [+], sssd [+], smtp [+], server [+], red hat security [+], pam [+], memory corruption [+], denial of service [+], windows [+], vulnerability [+], usa [+], smb [+], code execution [+], authentication mechanism [+], agustin azubel [+], strongswan [+], ipsec [+], mac os [+], ipsec implementation [+], implementation [+], exchange protocols [+]

• May 03, 2012
• 15:54

  strongSwan IPsec Implementation 4.6.3

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• 15:54

  strongSwan IPsec Implementation 4.6.3

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• February 21, 2012
• 18:58

  strongSwan IPsec Implementation 4.6.2

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• 18:58

  strongSwan IPsec Implementation 4.6.2

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• November 11, 2011
• 17:11

  strongSwan IPsec Implementation 4.6.1

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• 17:11

  strongSwan IPsec Implementation 4.6.1

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• November 07, 2011
• 17:42

  strongSwan IPsec Implementation 4.6.0

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• 17:42

  strongSwan IPsec Implementation 4.6.0

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• September 19, 2011
• 10:45

  [Paper] Understanding the Windows SMB NTLM Weak Nonce vulnerability

   » ‎ SecDocs
  Authors: Agustin Azubel Hernan Ochoa
  Tags: Windows NTLM
  Event: Black Hat USA 2010
  Abstract: In February 2010, we found a vulnerability in the SMB NTLM Windows Authentication mechanism that have been present in Windows systems for at least 14 years (from Windows NT 4 to Windows Server 2008). You probably haven't heard about this vulnerability, but basically the authentication mechanism used by all Windows systems to access remote resources using SMB was flawed, allowing attackers to get read/write access to remote resources and remote code execution without credentials, using different techniques such as passive replay attacks, active collection of duplicate challenges/responses, and prediction of challenges. This vulnerability is also a good example of flaws found in challenge-response authentication mechanisms. This presentation will describe the vulnerability in detail, including its scope and severity, explain different techniques to exploit the flaws found and demo fully functional exploit code.

  Tags:  smb vulnerability windows agustin-azubel usa authentication-mechanisms authentication-mechanism code-execution  

• 10:45

  [Slides] Understanding the Windows SMB NTLM Weak Nonce vulnerability

   » ‎ SecDocs
  Authors: Agustin Azubel Hernan Ochoa
  Tags: Windows NTLM
  Event: Black Hat USA 2010
  Abstract: In February 2010, we found a vulnerability in the SMB NTLM Windows Authentication mechanism that have been present in Windows systems for at least 14 years (from Windows NT 4 to Windows Server 2008). You probably haven't heard about this vulnerability, but basically the authentication mechanism used by all Windows systems to access remote resources using SMB was flawed, allowing attackers to get read/write access to remote resources and remote code execution without credentials, using different techniques such as passive replay attacks, active collection of duplicate challenges/responses, and prediction of challenges. This vulnerability is also a good example of flaws found in challenge-response authentication mechanisms. This presentation will describe the vulnerability in detail, including its scope and severity, explain different techniques to exploit the flaws found and demo fully functional exploit code.

  Tags:  smb vulnerability windows agustin-azubel usa authentication-mechanisms authentication-mechanism code-execution  

• August 03, 2011
• 17:04

  strongSwan IPsec Implementation 4.5.3

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• 17:04

  strongSwan IPsec Implementation 4.5.3

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A rich choice of modular plugins adds additional features like Trusted Network Connect or advanced cryptographical algorithms.

  Tags:  implementation ipsec strongswan mac-os authentication-mechanisms ipsec-implementation exchange-protocols  

• July 21, 2011
• 7:22

  Red Hat Security Advisory 2011-0975-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-0975-01 - The System Security Services Daemon provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back-end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects such as FreeIPA. A flaw was found in the SSSD PAM responder that could allow a local attacker to force SSSD to enter an infinite loop via a carefully-crafted packet. With SSSD unresponsive, legitimate users could be denied the ability to log in to the system.

  Tags:  system sssd security pam system-security-services authentication-mechanisms red-hat-security  

• 7:22

  Red Hat Security Advisory 2011-0975-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2011-0975-01 - The System Security Services Daemon provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back-end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects such as FreeIPA. A flaw was found in the SSSD PAM responder that could allow a local attacker to force SSSD to enter an infinite loop via a carefully-crafted packet. With SSSD unresponsive, legitimate users could be denied the ability to log in to the system.

  Tags:  system sssd security pam system-security-services authentication-mechanisms red-hat-security  

• 7:22

  Red Hat Security Advisory 2011-0975-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-0975-01 - The System Security Services Daemon provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back-end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects such as FreeIPA. A flaw was found in the SSSD PAM responder that could allow a local attacker to force SSSD to enter an infinite loop via a carefully-crafted packet. With SSSD unresponsive, legitimate users could be denied the ability to log in to the system.

  Tags:  system sssd security pam system-security-services authentication-mechanisms red-hat-security  

• May 25, 2011
• 7:16

  strongSwan IPsec / IKEv1 / IKEv2 Implementation For Linux 4.5.2

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  ipsec ikev strongswan authentication-mechanisms strong-authentication pkcs-11  

• 7:16

  strongSwan IPsec / IKEv1 / IKEv2 Implementation For Linux 4.5.2

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  ipsec ikev strongswan authentication-mechanisms strong-authentication pkcs-11  

• May 11, 2011
• 17:54

  Ubuntu Security Notice USN-1131-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1131-1 - Thomas Jarosch discovered that Postfix incorrectly handled authentication mechanisms other than PLAIN and LOGIN when the Cyrus SASL library is used. A remote attacker could use this to cause Postfix to crash, leading to a denial of service, or possibly execute arbitrary code as the postfix user.

  Tags:  postfix ubuntu security thomas-jarosch cyrus-sasl cyrus-sasl-library authentication-mechanisms denial-of-service  

• 17:54

  Ubuntu Security Notice USN-1131-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1131-1 - Thomas Jarosch discovered that Postfix incorrectly handled authentication mechanisms other than PLAIN and LOGIN when the Cyrus SASL library is used. A remote attacker could use this to cause Postfix to crash, leading to a denial of service, or possibly execute arbitrary code as the postfix user.

  Tags:  postfix ubuntu security thomas-jarosch cyrus-sasl cyrus-sasl-library authentication-mechanisms denial-of-service  

• 17:54

  Ubuntu Security Notice USN-1131-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1131-1 - Thomas Jarosch discovered that Postfix incorrectly handled authentication mechanisms other than PLAIN and LOGIN when the Cyrus SASL library is used. A remote attacker could use this to cause Postfix to crash, leading to a denial of service, or possibly execute arbitrary code as the postfix user.

  Tags:  postfix ubuntu security thomas-jarosch cyrus-sasl cyrus-sasl-library authentication-mechanisms denial-of-service  

• May 09, 2011
• 17:48

  Postfix SMTP Server Memory Corruption

   » ‎ Packet Storm Security Advisories
  The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN (the ANONYMOUS mechanism is unaffected but should not be enabled for different reasons).

  Tags:  server postfix smtp cyrus-sasl cyrus-sasl-library memory-corruption authentication-mechanisms  

• 17:48

  Postfix SMTP Server Memory Corruption

   » ‎ Packet Storm Security Recent Files
  The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN (the ANONYMOUS mechanism is unaffected but should not be enabled for different reasons).

  Tags:  server postfix smtp cyrus-sasl cyrus-sasl-library memory-corruption authentication-mechanisms  

• 17:48

  Postfix SMTP Server Memory Corruption

   » ‎ Packet Storm Security Misc. Files
  The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN (the ANONYMOUS mechanism is unaffected but should not be enabled for different reasons).

  Tags:  server postfix smtp cyrus-sasl cyrus-sasl-library memory-corruption authentication-mechanisms  

• February 14, 2011
• 13:41

  strongSwan IPsec / IKEv1 / IKEv2 Implementation For Linux 4.5.1

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  ipsec ikev strongswan authentication-mechanisms strong-authentication pkcs-11  

• 13:41

  strongSwan IPsec / IKEv1 / IKEv2 Implementation For Linux 4.5.1

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  ipsec ikev strongswan authentication-mechanisms strong-authentication pkcs-11  

• November 01, 2010
• 22:02

  strongswan-4.5.0.tar.gz

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  tar strongswan project authentication-mechanisms strong-authentication pkcs-11  

• May 03, 2010
• 19:02

  strongswan-4.4.0.tar.gz

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  tar strongswan project authentication-mechanisms strong-authentication pkcs-11  

• 19:02

  strongswan-4.4.0.tar.gz

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  tar strongswan project authentication-mechanisms strong-authentication pkcs-11  

• February 12, 2010
• 17:00

  strongswan-4.3.6.tar.gz

   » ‎ Packet Storm Security Misc. Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  tar strongswan project authentication-mechanisms strong-authentication pkcs-11  

• 17:00

  strongswan-4.3.6.tar.gz

   » ‎ Packet Storm Security Recent Files
  strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It interoperates with most other IPsec-based VPN products. It is a descendant of the discontinued FreeS/WAN project. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

  Tags:  tar strongswan project authentication-mechanisms strong-authentication pkcs-11