6490 matches found
CVE-1999-1285: Undefined Security Weakness
Linux 2.1.132 and earlier allows local users to cause a denial of service resource exhaustion by reading a large buffer from a random device e.g. /dev/urandom, which cannot be interrupted until the read has completed...
CVE-1999-1406: Undefined Security Weakness
dumpreg in Red Hat Linux 5.1 opens /dev/mem with ORDWR access, which allows local users to cause a denial of service crash by redirecting fd 1 stdout to the kernel...
CVE-1999-1449: Undefined Security Weakness
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service kernel panic by reading from the /dev/tcx0 TCX device...
CVE-2001-0404
Directory traversal vulnerability in JavaServer Web Dev Kit JSWDK 1.0.1 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request to the WEB-INF directory...
CVE-2001-0404
Directory traversal vulnerability in JavaServer Web Dev Kit JSWDK 1.0.1 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request to the WEB-INF directory...
CVE-2001-0404: Undefined Security Weakness
Directory traversal vulnerability in JavaServer Web Dev Kit JSWDK 1.0.1 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request to the WEB-INF directory...
CVE-2000-1145: Undefined Security Weakness
Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManTrap processes or modify arbitrary data files...
CVE-2000-0454
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter...
CVE-2000-0535
CVE-2000-0535 affects OpenSSL 0.9.4 and OpenSSH on FreeBSD, where FreeBSD Alpha's missing /dev/random or /dev/urandom leads to weak cryptographic keys. The issue arises from improper device checks, resulting in keys that may be easier to break. The provided documents describe the root cause and a...
CVE-2000-0535: Undefined Security Weakness
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken...
CVE-2000-0337: Undefined Security Weakness
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...
CVE-2000-0531: Undefined Security Weakness
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets...
CVE-2000-0454: Undefined Security Weakness
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter...
Проблемы с libdes в NetBSD
Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...
Security Advisory 2000-007
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-007 ================================= Topic: bad key generation in libdes if no /dev/urandom Version: Domestic US NetBSD-current between 19990624 and 20000622. No formal releases of NetBSD are vulnerable. Severity: high only if...
Проблемы с /dev/random в FreeBSD на alpha
В версии FreeBSD для платформы alpha отсутствовало устройство /dev/random генерирующее псевдо-случайные последовательности. Тем не менее, многие крипто-программы, включая OpenSSH и OpenSSL генерировали ключи и сертификаты не учитывая этот факт...
CVE-2000-0454
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter...
CVE-2000-0365
The CVE-2000-0365 entry concerns Red Hat Linux 6.0 where the /dev/pts file system is mounted with insecure modes. This configuration allows local users to write to other tty devices. The provided documents describe the affected component (/dev/pts) and the resulting local access impact but do not...