Everything related to Computer Security - Security Audits, Security Vulnerabilities, Intrusion Detection, Incident Handling, Forensics and Investigation, Information Security Policies, and a whole lot more.
Search This Blog
Thursday, May 31, 2012
[SECURITY] [DSA 2483-1] strongswan security update
Hash: SHA1
- -------------------------------------------------------------------------
Debian Security Advisory DSA-2483-1 security@debian.org
http://www.debian.org/security/ Yves-Alexis Perez
May 31, 2012 http://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : strongswan
Vulnerability : authentication bypass
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-2388
An authentication bypass issue was discovered by the Codenomicon CROSS
project in strongSwan, an IPsec-based VPN solution. When using
RSA-based setups, a missing check in the gmp plugin could allow an
attacker presenting a forged signature to successfully authenticate
against a strongSwan responder.
The default configuration in Debian does not use the gmp plugin for
RSA operations but rather the OpenSSL plugin, so the packages as
shipped by Debian are not vulnerable.
For the stable distribution (squeeze), this problem has been fixed in
version 4.4.1-5.2.
For the testing distribution (wheezy), this problem has been fixed in
version 4.5.2-1.4.
For the unstable distribution (sid), this problem has been fixed in
version 4.5.2-1.4.
We recommend that you upgrade your strongswan packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQEcBAEBAgAGBQJPx6vTAAoJEL97/wQC1SS+cFYIAIq65txOmBylguvyEIzgYsoa
EGLxDtKYf8lM78MKS1sSyoXocS9Yo3PkENEbVdcRuC8b+81+FDm+Y8VWOAoNQkwV
bzzvjDCmVKlzmmdOLBgc1On+kOpCGOL42khkIlHYiTI9qqlEmYaSpSm10h3sxzDU
xt3/1PAhPE9O8TX/Rl2au8ihLHLIV/45Ptt/QSMrErIuRInUqV4D0tNbU/M3Styf
jA9MjG2b6P+sY7CeOf22QKsBvgcmx/dvat2DzvXDcFQgq/FiG+FVuZ/AZkzh4z5u
xeQQiQUm1jreHNmAQ2UmLx/TUTRbj1xLfPReqLy/vDLgdTD2XyaoHhW38zMCNaY=
=cSz+
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/87obp4w9km.fsf@mid.deneb.enyo.de
OpenFlow and Cisco OPEN's feedback loop
| Education group: Schools need 100 Mbps per 1,000 broadband users | 10 reasons your Wi-Fi speed stinks (and what you can do about it) | ||||||||||
| Network World Network Optimization | ||||||||||
OpenFlow and Cisco OPEN's feedback loop WHITE PAPER: FireEye Strategies for advanced threat security in 2012 Download this new FireEye research brief and learn how traditional security defenses can leave you vulnerable and necessary steps to gain visibility into all stages of the attack vector. Read now. In this Issue
WHITE PAPER: CommVault The Benefits of Modernizing Your Data Protection Conventional backup and recovery approaches are not robust enough to meet today's data and information management challenges, let alone those of tomorrow. A new strategy is essential. Learn More Education group: Schools need 100 Mbps per 1,000 broadband users 10 reasons your Wi-Fi speed stinks (and what you can do about it) Juniper packs 30 new features into Web security software WHITE PAPER: F5 Three Phases to Improve Application Delivery Teams Most organizations struggling with application performance have not developed the processes and organization that can maximize the benefits of their application delivery solutions. In this report, Gartner outlines three phases to help IT organizations improve their structure to deliver better application performance. Learn More! Cisco software defined-networking products on tap in June VMware: Make your networks 10x simpler to manage Open-source messaging at (nearly) the speed of light WHITE PAPER: BMC Software Workload Automation Challenges and Opportunities This Executive Brief discusses IDC's perspective on how enterprise workload management requirements are changing and highlights the ways that workload automation solutions can address these emerging requirements. Learn More! AT&T demands we change our networks Intel adds sleep-mode Wi-Fi connectivity feature to ultrabooks Wi-Fi and mobile networks grow, evolve and converge AT&T lights up 4G LTE in New Orleans, Baton Rouge and Naples | ||||||||||
| ||||||||||
SLIDESHOWS 10 terrific LTE smartphones for $150 or less JOIN THE NETWORK WORLD COMMUNITIES MOST-READ STORIES
| ||||||||||
| Do You Tweet? You are currently subscribed to networkworld_network_optimization_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2011 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. ** | ||||||||||
Iran's discovery of Flame malware turning into political hot potato
| BYOD Security Gotchas | The Flame Virus: Your FAQs Answered | ||||||||||
| Network World Security | ||||||||||
Iran's discovery of Flame malware turning into political hot potato WHITE PAPER: Fluke Networks How to Choose a Datacenter OTDR This white paper helps fiber installers and network technicians understand the key parameters for selecting an OTDR. Choosing the right device not only solves this new generation of datacenter testing requirements, but also helps professionals work efficiently, and increase the reliability and value of the enterprise fiber network. Learn More! In this Issue
WHITE PAPER: Fortinet Next-Generation Security for Enterprise Networks Since the concept of a 'next-generation firewall' was introduced several years ago by Gartner, many network security vendors have introduced their own next-generation firewalls to address this product category - but with varying results. View Now BYOD Security Gotchas The Flame Virus: Your FAQs Answered RESOURCE COMPLIMENTS OF: IT Roadmap Denver Your IT Career Roadmap This unique session is designed with you, the IT professional in mind. How can you build your personal brand, and properly design a career plan? How do you work with your staff to create a plan that retains your best talent? Come to IT Roadmap Denver for valuable information on how today's IT leaders build successful careers. Click to continue White House launches coordinated effort to battle botnets UNCC Breach Highlights the Need to Think Differently about Cybersecurity WHITE PAPER: IBM Is Your Database Ready For Your Company's Future? This brochure is targeted to executives and will cover all the business benefits of DB2. Learn More IT staff, engineers among top 10 toughest jobs to fill in US Juniper packs 30 new features into Web security software BYOD: Time to Adjust Your Privacy Expectations Biggest tech industry layoffs of 2012 | ||||||||||
| ||||||||||
SLIDESHOWS 10 terrific LTE smartphones for $150 or less JOIN THE NETWORK WORLD COMMUNITIES MOST-READ STORIES
| ||||||||||
| Do You Tweet? You are currently subscribed to networkworld_security_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2011 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. ** | ||||||||||
Microsoft launches Office 365 edition for US government customers
| NSA security expert worries about mobility, cloud | 10 keys for building private clouds | ||||||||||
| Network World Cloud Computing | ||||||||||
Microsoft launches Office 365 edition for US government customers RESOURCE COMPLIMENTS OF: Evault Use the Best Technology for Data Recovery EVault® cloud-connected backup and recovery technology blends the best of onsite software and offsite cloud services. Get WAN-optimized data transfers backed by our rock-solid cloud--it's the right way to protect your multi-site environment. Learn More. In this Issue
WEBCAST: SAP Automate Your Partners for Efficient E-Business Date: Tuesday, June 5, 2012, 2:00 PM EDT Join IDC's Maureen Fleming and SAP for an insightful Webcast on the different approaches companies are taking to B2B integration and how you can ask the right questions to reassess your B2B approach. Learn More NSA security expert worries about mobility, cloud 10 keys for building private clouds Usage-based Internet service: Sometimes competition in name only WHITE PAPER: Extreme Networks Delivering a Greener Data Center This paper covers power utilization, intelligent power management and industry best practices for energy efficiency. Extreme Networks® takes a lifecycle approach to power efficiency, management and recycling, offering savings to our customers and promoting a greener world. Learn more. Security startup Vaultive tackles cloud-based encryption Fedora 17 takes to the cloud WHITE PAPER: IBM Cloud Computing in the Midmarket: Assessing the Options This paper looks at how organizations can integrate cloud solutions into existing infrastructures and how an incremental implementation approach might work. The paper also explains some principles for measuring the success of your cloud solutions. Learn More Mobile device management: Getting started Ensuring that mobile applications are truly secure Dell reaches for the cloud with new prototype ARM server Oracle prepares to enter PaaS wars | ||||||||||
| ||||||||||
SLIDESHOWS 10 terrific LTE smartphones for $150 or less JOIN THE NETWORK WORLD COMMUNITIES MOST-READ STORIES
| ||||||||||
| Do You Tweet? You are currently subscribed to networkworld_cloud_computing_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2011 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. ** | ||||||||||
Windows 8 Release Preview leaks to Web
| Chrome to take world's top browser spot for May | Microsoft launches Office 365 edition for US government customers | ||||||||||
| Network World Microsoft | ||||||||||
Windows 8 Release Preview leaks to Web WHITE PAPER: IBM How Analytics Bring Organizations Closer to Their Customers Find out how IBM Business Analytics solutions can help your company turn disconnected data into information, information into insight, then turn insight into action that can boost your bottom line. Learn More In this Issue
WHITE PAPER: IBM Strengthen Your Business with Cloud Computing This white paper provides a brief overview of cloud computing, explains how midsize companies can benefit, and describes the steps they can take to take advantage of what it has to offer. Learn More Chrome to take world's top browser spot for May Microsoft launches Office 365 edition for US government customers Consumer Reports: Free anti-malware software for Windows, Mac is effective WHITE PAPER: FireEye FireEye Advanced Threat Report 2H2011 This report is unique in that it is not an analysis of well-known malware or billions of spam messages. Instead, we provide insight into the threats that are successful and therefore dangerous -- those which got through traditional defenses and into enterprise networks in 2H 2011. Read now. 1 in 5 U.S. Windows PCs lack antivirus defenses Iran's discovery of Flame malware turning into political hot potato No more free Explorer development: VS11 Express will only make Metro apps WHITE PAPER: CommVault ESG Report: Modernizing Data Protection In order to assess the current state of the data protection market, ESG recently conducted a global survey among IT professionals familiar with and/or responsible for data protection solutions and processes, as well as potential future plans. Learn More Can Microsoft ban class-action suits? Apparently so. Security startup Vaultive tackles cloud-based encryption Motorola Mobility has infringed Microsoft patent, says Munich court | ||||||||||
| ||||||||||
SLIDESHOWS 10 terrific LTE smartphones for $150 or less JOIN THE NETWORK WORLD COMMUNITIES MOST-READ STORIES
| ||||||||||
| Do You Tweet? You are currently subscribed to networkworld_microsoft_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2011 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. ** | ||||||||||