jetlib.sec » Tags » authentication-protocol

Feeds

133340 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

10 items tagged "authentication protocol"

Related tags: zero day [+], zero [+], webauth [+], tcp ports [+], diameter [+], day [+], circumference [+], base library [+], authentication [+], user [+], target system [+], target [+], smb service [+], mac [+], incrypt [+], iclass [+], hid [+], cryptographic algorithm [+], cryptanalysis [+], attacker [+]

• February 06, 2012
• 17:10

  Cryptanalysis Of INCrypt32 In HID's iCLASS Systems

   » ‎ Packet Storm Security Recent Files
  The cryptographic algorithm called INCrypt32 is a MAC algorithm to authenticate participants, RFID cards and readers, in HID Global's iCLASS systems. HID's iCLASS cards are widely used contactless smart cards for physical access control. Although INCrypt32 is a heart of the security of HID's iCLASS systems, its security has not been evaluated yet since the specification has not been open to public. In this paper, they reveal the specification of INCrypt32 by reverse engineering an iCLASS card and investigate the security of INCrypt32. As a result, we show that the secret key of size 64 bits can be recovered using only 218 MAC queries if the attacker can request MAC for chosen messages of arbitrary length. If the length of messages is limited to pre-determined values by the authentication protocol, the required number of MAC queries grows to 242 to recover the secret key.

  Tags:  hid iclass incrypt mac authentication-protocol cryptographic-algorithm cryptanalysis  

• 17:10

  Cryptanalysis Of INCrypt32 In HID's iCLASS Systems

   » ‎ Packet Storm Security Misc. Files
  The cryptographic algorithm called INCrypt32 is a MAC algorithm to authenticate participants, RFID cards and readers, in HID Global's iCLASS systems. HID's iCLASS cards are widely used contactless smart cards for physical access control. Although INCrypt32 is a heart of the security of HID's iCLASS systems, its security has not been evaluated yet since the specification has not been open to public. In this paper, they reveal the specification of INCrypt32 by reverse engineering an iCLASS card and investigate the security of INCrypt32. As a result, we show that the secret key of size 64 bits can be recovered using only 218 MAC queries if the attacker can request MAC for chosen messages of arbitrary length. If the length of messages is limited to pre-determined values by the authentication protocol, the required number of MAC queries grows to 242 to recover the secret key.

  Tags:  hid iclass incrypt mac authentication-protocol cryptographic-algorithm cryptanalysis  

• December 04, 2011
• 14:35

  Circumference WebAuth Client 1.5

   » ‎ Packet Storm Security Recent Files
  Circumference is a server-client-style implementation of a WebAuth client and server to supplement the WebAuth Diameter subprotocol, complete with an extensible Diameter server and base library. Diameter is a peer-to-peer authentication protocol as specified in RFC3588 and its updates.

  Tags:  webauth circumference diameter authentication-protocol base-library  

• 14:35

  Circumference WebAuth Client 1.5

   » ‎ Packet Storm Security Tools
  Circumference is a server-client-style implementation of a WebAuth client and server to supplement the WebAuth Diameter subprotocol, complete with an extensible Diameter server and base library. Diameter is a peer-to-peer authentication protocol as specified in RFC3588 and its updates.

  Tags:  webauth circumference diameter authentication-protocol base-library  

• 14:35

  Circumference WebAuth Client 1.5

   » ‎ Packet Storm Security Misc. Files
  Circumference is a server-client-style implementation of a WebAuth client and server to supplement the WebAuth Diameter subprotocol, complete with an extensible Diameter server and base library. Diameter is a peer-to-peer authentication protocol as specified in RFC3588 and its updates.

  Tags:  webauth circumference diameter authentication-protocol base-library  

• April 01, 2011
• 18:53

  Zero Day Initiative Advisory 11-115

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-115 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the solid.exe process which listens by default on TCP ports 1315, 1964 and 2315. The authentication protocol allows a remote attacker to specify the length of a password hash. By specifying a minimum length the attacker can force the process to validate only the first several bytes of the password hash. This can be abused to bypass authentication to the database.

  Tags:  authentication day zero authentication-protocol tcp-ports zero-day  

• 18:53

  Zero Day Initiative Advisory 11-115

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-115 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the solid.exe process which listens by default on TCP ports 1315, 1964 and 2315. The authentication protocol allows a remote attacker to specify the length of a password hash. By specifying a minimum length the attacker can force the process to validate only the first several bytes of the password hash. This can be abused to bypass authentication to the database.

  Tags:  authentication day zero authentication-protocol tcp-ports zero-day  

• 18:53

  Zero Day Initiative Advisory 11-115

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-115 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the solid.exe process which listens by default on TCP ports 1315, 1964 and 2315. The authentication protocol allows a remote attacker to specify the length of a password hash. By specifying a minimum length the attacker can force the process to validate only the first several bytes of the password hash. This can be abused to bypass authentication to the database.

  Tags:  authentication day zero authentication-protocol tcp-ports zero-day  

• February 09, 2010
• 18:00

  OCHOA-2010-0209.txt

   » ‎ Packet Storm Security Recent Files
  Flaws in Microsoft's implementation of the NTLM challenge-response authentication protocol causing the server to generate duplicate challenges/nonces and an information leak allow an unauthenticated remote attacker without any kind of credentials to access the SMB service of the target system under the credentials of an authorized user. Depending on the privileges of the user, the attacker will be able to obtain and modify files on the target system and execute arbitrary code. Proof of concept exploit included.

  Tags:  user attacker target target-system authentication-protocol smb-service  

• 18:00

  OCHOA-2010-0209.txt

   » ‎ Packet Storm Security Exploits
  Flaws in Microsoft's implementation of the NTLM challenge-response authentication protocol causing the server to generate duplicate challenges/nonces and an information leak allow an unauthenticated remote attacker without any kind of credentials to access the SMB service of the target system under the credentials of an authorized user. Depending on the privileges of the user, the attacker will be able to obtain and modify files on the target system and execute arbitrary code. Proof of concept exploit included.

  Tags:  user attacker target target-system authentication-protocol smb-service