Alertes
 

Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

mardi 9 juin 2015

Logjam Attack (CERT-EU Security Advisory 2015-325)

Last days was published a new vulnerability related to TSL/SSL protocol called Logjam attack. This vulnerability allows a man-in-the-middle attacker to downgrade vulnerable TLS connections to 512-bit export-grade cryptography (which is an old working mode, still there to support legacy system enforcing former US cryptography exportation restrictions).

Lien vers l'article source

Microsoft Security Bulletin MS14-068 - Critical Vulnerability in Kerberos Could Allow Elevation of Privileges (MS KB 3011780) - (CERT-EU Security Advisory 2014-253) Vulnerable Dell Self-Signed Root certificates (CERT-EU Security Advisory 2015-750)
Auteur: Cert EU

Catégories: CertEUNombre de vues: 263

x

Événements SSI