3559 matches found
CVE-2001-0162
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2001-0163
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
PT-2001-1393 · Microsoft · Wince
Name of the Vulnerable Software and Affected Versions: WinCE version 3.0.9348 Description: The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers ISNs. Recommendations: For WinCE version 3.0.9348, at the moment, there...
CVE-2000-0916
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...
CVE-2000-0916
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...
CVE-2000-0916
CVE-2000-0916 is a historical TCP-ISN prediction vulnerability affecting FreeBSD 4.1.1 and earlier (and possibly other BSD-based OSes). The root cause is an insufficient random initial sequence number (ISN) generator, enabling remote attackers to spoof TCP connections. Several connected sources c...
Дырка в pam_mysql (unescaped SQL sequence)
Ввод пользователя используется для построения SQL-запроса...
CVE-2000-0703
suidperl aka sperl does not properly cleanse the escape sequence "!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence...
CVE-2000-0703
CVE-2000-0703 affects suidperl (sperl). The vulnerability arises because suidperl does not properly cleanse the escape sequence "~!" before invoking /bin/mail to report errors. This enables local users to gain privileges by setting the interactive environmental variable and running suidperl with ...
CVE-2000-0703
suidperl aka sperl does not properly cleanse the escape sequence "!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence...
HERT advisory: FreeBSD IP Spoofing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------- HERT - Hacker Emergency Response Team [email protected] - http://hert.org Advisory: 00003 Title: FreeBSD IP Spoofing Date: 1st October 2000 Summary: IP Spoofing Sequence number predictio...
FreeBSD-SA-00:52.tcp-iss
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:52 Security Advisory FreeBSD, Inc. Topic: TCP uses weak initial sequence numbers Category: core Module: kernel Announced: 2000-10-06 Credits: Hacker Emergency Response...
SUIDPerl 5.00503 - Mail Shell Escape (1)
source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...
wftpd241.txt
================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC10 11/07/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: An out of sequence RNTO...
Проблемы с libdes в NetBSD
Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...
CVE-2000-0328
Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...
CVE-2000-0178
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...
CVE-2000-0178
CVE-2000-0178 affects Foundry Networks ServerIron switches, where predictable TCP/IP sequence numbers can enable remote attackers to spoof or hijack sessions. The available documents confirm the vulnerability and resulting impact (session spoofing/hijacking) but do not provide concrete remediatio...