SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Security)  >   RSA BSAFE Crypto-C Vendors:   RSA
RSA BSAFE ASN.1 Parsing Bug Lets Remote Users Deny Service
SecurityTracker Alert ID:  1018095
SecurityTracker URL:  http://securitytracker.com/id/1018095
CVE Reference:   CVE-2006-3894   (Links to External Site)
Date:  May 22 2007
Impact:   Denial of service via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): Crypto-C prior to 6.3.1 and Cert-C prior to 2.8
Description:   A vulnerability was reported in RSA BSAFE. A remote user can cause denial of service conditions.

A remote user can send specially crafted ASN.1 encoded data to trigger a parsing flaw and cause the linked application to crash.

The RSA BSAFE Crypto-C and Cert-C libraries (and applications that link to these libraries) are affected.

RSA has assigned Bug ID 46337 to this vulnerability.

US-CERT reported this vulnerability.

The original advisory is available at:

http://www.kb.cert.org/vuls/id/754281

Impact:   A remote user can cause the target application or device to crash.
Solution:   The vendor has issued a fixed version (Crypto-C 6.3.1 and Cert-C 2.8).
Vendor URL:  www.rsasecurity.com/ (Links to External Site)
Cause:   Input validation error

Message History:   This archive entry has one or more follow-up message(s) listed below.
May 22 2007 (Cisco Issues Fix for IOS) RSA BSAFE ASN.1 Parsing Bug Lets Remote Users Deny Service
Cisco has released a fix for Cisco IOS and IOS XR, which are affected by this BSAFE vulnerability.
May 23 2007 (Cisco Issues Fix for Cisco ASA) RSA BSAFE ASN.1 Parsing Bug Lets Remote Users Deny Service
Cisco has released a fix for Cisco ASA.
May 23 2007 (Cisco Issues Fix for Cisco PIX) RSA BSAFE ASN.1 Parsing Bug Lets Remote Users Deny Service
Cisco has released a fix for Cisco PIX.
May 23 2007 (Cisco Issues Fix for Cisco FWSM) RSA BSAFE ASN.1 Parsing Bug Lets Remote Users Deny Service
Cisco has released a fix for Cisco Firewall Service Module.
May 23 2007 (Cisco Issues Fix for Cisco Unified CallManager) RSA BSAFE ASN.1 Parsing Bug Lets Remote Users Deny Service
Cisco has released a fix for Cisco Unified CallManager.



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC