Netnorth Limited - Status

‘DROWN’ – Decrypting RSA with Obsolete and Weakened eNcryption Various products may be affected by this vulnerability, given the common vulnerability and exposures designation of CVE-2016-0800. A cross-protocol attack was discovered that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites. Traffic… Continue reading →

‘Skeleton’ Buffer Overflow Vulnerability Various products may be affected by this vulnerability, given the common vulnerability and exposures designation of CVE-2015_7547. Multiple vulnerabilities in the ‘libresolv’ library of the ‘GNU C Library’ (aka ‘glibc’), could allow a remote attacker to remotely execute code. This typically affects systems based on Linux… Continue reading →

Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability Various Cisco ASA products may be affected by this vulnerability, given the common vulnerability and exposures designation of CVE-2016-1287. A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could… Continue reading →