257 matches found
CVE-2008-0166
creationtimestamp| type| source ---|---|--- 2008-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5622 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5632 2008-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5720 2021-05-22...
[USN-612-1] OpenSSL vulnerability
=========================================================== Ubuntu Security Notice USN-612-1 May 13, 2008 openssl vulnerability CVE-2008-0166 =========================================================== A weakness has been discovered in the random number generator used by OpenSSL on Debian and...
CVE-2008-0166
CVE-2008-0166 describes a Debian/Ubuntu OpenSSL PRNG flaw caused by removing seeding steps in md_rand.c, which left the OpenSSL PRNG predictable. Consequently, OpenSSH/OpenSSL keys generated on affected Debian-based systems (2006–2008) could be brute-forced or reproduced. Connected docs indicate ...
[SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator
------------------------------------------------------------------------ Debian Security Advisory DSA-1571-1 [email protected] http://www.debian.org/security/ Florian Weimer May 13, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 125-1 (analog)
The remote host is missing an update to analog announced via advisory DSA 125-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-0166
Summary: CVE-2007-0166 affects FreeBSD’s jail rc.d script. In FreeBSD 5.3 through 6.2, the host jail rc.d script did not verify pathnames when writing jail startup output to /var/log/console.log or when mounting/unmounting files, enabling a local root attacker inside the jail to overwrite host fi...
CVE-2006-0166
CVE-2006-0166 affects Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006. The issue involves temporary copies of files being stored in the Norton Protected Recycle Bin (NProtect) directory, which is hidden from the FindFirst/FindNext Windows APIs. This visibility weakness could all...
CVE-2004-0166
Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."...
CVE-2004-0166
Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."...
Apple Mac OS X Safari fails to properly display URLs in the status bar
Overview Apple Mac OS X Safari fails to properly display URLs in the status bar. Description Safari is a web browser for the Macintosh platform. There is an unspecified vulnerability in the way Safari displays URLs in the status bar. --- Impact The complete impact of this vulnerability is not yet...
CVE-2003-0166
Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...
CVE-2003-0166
Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...
CVE-2003-0166
PHP prior to 4.3.2 is affected by CVE-2003-0166 due to a signedness error in emalloc() that can allow remote attackers to cause memory exhaustion and potentially execute arbitrary code via negative arguments to functions such as socket_recv and socket_recvfrom (and possibly others). The issue ste...
CVE-2002-0166
CVE-2002-0166 covers a cross-site scripting vulnerability in analog prior to 5.22 where an HTTP request containing script text is logged and not properly sanitized during display, enabling a remote attacker to execute JavaScript. Affected: analog (pre-5.22). Root cause: insufficient filtering of ...
CVE-2001-0166
CVE-2001-0166 affects the Macromedia Shockwave/Flash plug-in (version 8 and earlier). The vulnerability arises from malformed SWF tag length fields, triggering a buffer overflow on processing the file, which may crash the plug-in and cause a denial of service. CERT reports the issue as a crash (D...
CVE-2000-0166
CVE-2000-0166 affects the InterAccess TelnetD server. A buffer overflow is triggered by a long login name, potentially allowing a remote attacker to execute commands. The NVD entry assigns a HIGH risk (CVSSv2: AV:N/AC:L/Au:N/C:C/I:C/A:C, base 10.0). No remediation details are provided in the conn...