5362 matches found
CVE-2000-0535
CVE-2000-0535 affects OpenSSL 0.9.4 and OpenSSH on FreeBSD, where FreeBSD Alpha's missing /dev/random or /dev/urandom leads to weak cryptographic keys. The issue arises from improper device checks, resulting in keys that may be easier to break. The provided documents describe the root cause and a...
CVE-2000-0531: Undefined Security Weakness
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets...
CVE-2000-0337: Undefined Security Weakness
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...
CVE-2000-0454: Undefined Security Weakness
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter...
CVE-2000-0535: Undefined Security Weakness
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken...
Security Advisory 2000-007
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-007 ================================= Topic: bad key generation in libdes if no /dev/urandom Version: Domestic US NetBSD-current between 19990624 and 20000622. No formal releases of NetBSD are vulnerable. Severity: high only if...
Проблемы с libdes в NetBSD
Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...
Проблемы с /dev/random в FreeBSD на alpha
В версии FreeBSD для платформы alpha отсутствовало устройство /dev/random генерирующее псевдо-случайные последовательности. Тем не менее, многие крипто-программы, включая OpenSSH и OpenSSL генерировали ключи и сертификаты не учитывая этот факт...
CVE-2000-0454
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter...
CVE-2000-0365
The CVE-2000-0365 entry concerns Red Hat Linux 6.0 where the /dev/pts file system is mounted with insecure modes. This configuration allows local users to write to other tty devices. The provided documents describe the affected component (/dev/pts) and the resulting local access impact but do not...
CVE-2000-0365: Undefined Security Weakness
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices...
DoS-атака через доменные сокеты UNIX в Linux
: Большой объем информации посланный с помощью sendto через сокет в /dev/log приводит к краху системы...
CVE-1999-0426
CVE-1999-0426 affects Linux prior to 2.0.36 due to default permissions of the /dev/kmem character device, enabling IP spoofing. Root cause: /dev/kmem permissions allowed spoofing without additional privileges. Impact: network-based spoofing risk on affected systems. Mitigation: upgrade to Linux 2...
CVE-1999-0426: Incorrect Default Permissions
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing...
ssh-1.2.27.txt
------------------------------------------------------------------- Periodically, the moderator of of the vuln-dev mailing list will post summaries of issues discussed there to Bugtraq and possibly other relevant lists. This will usually happen when an issue has been resolved, or it appears that...
CVE-1999-0466: Undefined Security Weakness
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device...
kmem.SuSE.txt
Date: Fri, 19 Mar 1999 22:45:29 -0800 From: Aleph One To: [email protected] Subject: The default permissions on /dev/kmem is insecure. SuSE Security Announcement Packages: devs- linux-2.0.35 and below Date: Thu Mar 18 10:22:11 CET 1999 Affected: SuSE 6.0 and below, other Linux distributions Su...
PT-2001-2674 · Isc +3 · Inn2-Inews +8
Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.3.0 ssh-1 versions prior to 1.2.31 Debian GNU/Linux affected versions not specified Description: The issue concerns multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including...
