Lucene search
FreeBSD708C65A5-7C58-11DE-A994-0030843D3802HistoryJul 15, 2009 - 12:00 a.m.
mono -- XML signature HMAC truncation spoofing
2009-07-1500:00:00
vuxml.freebsd.org
25
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.973
Percentile
99.9%
Secunia reports:
A security issue has been reported in Mono, which can be
exploited by malicious people to conduct spoofing attacks.
The security issue is caused due to an error when processing
certain XML signatures.
Related
checkpoint_advisories
checkpoint_advisories
Microsoft XML Signature HMAC Truncation Bypass (MS10-041; CVE-2009-0217)
2010-06-08 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:269 (mono)
2009-10-19 00:00:00
FreeBSD Ports: mono
2009-08-17 00:00:00
Mandrake Security Advisory MDVSA-2009:269 (mono)
2009-10-19 00:00:00
redhat
redhat
(RHSA-2009:1428) Moderate: xmlsec1 security update
2009-09-08 00:00:00
(RHSA-2009:1649) Moderate: JBoss Enterprise Application Platform 4.3.0.CP07 update
2009-12-09 00:00:00
(RHSA-2009:1201) Important: java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
ubuntucve
ubuntucve
CVE-2009-0217
2009-07-14 00:00:00
CVE-2013-2155
2013-08-20 00:00:00
securityvulns
securityvulns
nessus
nessus
Solaris 10 (x86) : 141710-03
2018-03-12 00:00:00
Fedora 10 : xml-security-c-1.5.1-1.fc10 (2009-8121)
2009-08-01 00:00:00
Mandriva Linux Security Advisory : mono (MDVSA-2009:269)
2010-07-30 00:00:00
prion
prion
Authentication flaw
2009-07-14 23:30:00
Design/Logic Flaw
2013-08-20 22:55:00
veracode
veracode
Authentication Bypass
2020-04-10 00:35:27
debian
debian
[Backports-security-announce] Security Update for xml-security-c
2009-08-06 08:37:46
[SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery
2009-08-02 13:48:02
[Backports-security-announce] Security Update for xml-security-c
2009-08-06 08:38:10
cvelist
cvelist
CVE-2009-0217
2009-07-14 23:00:00
CVE-2013-2155
2013-08-20 22:00:00
github
github
fedora
fedora
[SECURITY] Fedora 11 Update: xml-security-c-1.5.1-1.fc11
2009-07-31 18:04:52
[SECURITY] Fedora 11 Update: xmlsec1-1.2.12-1.fc11
2009-08-11 22:33:07
[SECURITY] Fedora 10 Update: xml-security-c-1.5.1-1.fc10
2009-07-31 17:59:26
cve
cve
CVE-2009-0217
2009-07-14 23:30:00
CVE-2013-2155
2013-08-20 22:55:03
osv
osv
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
2022-05-02 03:13:38
openoffice.org - several
2010-02-12 00:00:00
mskb
mskb
cert
cert
XML signature HMAC truncation authentication bypass
2009-07-14 00:00:00
centos
centos
xmlsec1 security update
2009-09-09 00:48:06
java security update
2009-08-09 04:11:10
debiancve
debiancve
CVE-2009-0217
2009-07-14 23:30:00
CVE-2013-2155
2013-08-20 22:55:03
nvd
nvd
CVE-2009-0217
2009-07-14 23:30:00
CVE-2013-2155
2013-08-20 22:55:03
oraclelinux
oraclelinux
xmlsec1 security update
2009-09-09 00:00:00
java-1.6.0-openjdk security and bug fix update
2009-08-06 00:00:00
ubuntu
ubuntu
Mono vulnerabilities
2009-08-26 00:00:00
OpenOffice.org vulnerabilities
2010-02-24 00:00:00
OpenJDK vulnerabilities
2009-08-11 00:00:00
ibm
ibm
suse
suse
remote code execution in OpenOffice_org
2010-03-16 16:11:32
remote code execution in java-1_6_0-ibm
2009-11-04 15:26:34
remote code execution in java-1_6_0-ibm
2010-01-12 17:47:21
threatpost
threatpost
OpenOffice Zaps Six Security Bugs
2010-02-18 15:09:26
freebsd
freebsd
openoffice.org -- multiple vulnerabilities
2006-08-24 00:00:00
gentoo
gentoo
Mono: Multiple vulnerabilities
2012-06-21 00:00:00
OpenOffice, LibreOffice: Multiple vulnerabilities
2014-08-31 00:00:00
oracle
oracle
09-07 CPU Advisory
2009-07-14 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.973
Percentile
99.9%
Related for 708C65A5-7C58-11DE-A994-0030843D3802