Erlang/OTP SSH library uses a weak random number generator

Overview The Erlang/OTP SSH library's random number generator is not cryptographically strong because it relies on predictable seed material. Description Geoff Cant's report states:The Erlang/OTP ssh library implements a number of cryptographic operations that depend on cryptographically strong...

Luxology Modo 401 .LXO Integer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Luxology Modo 401 .LXO Integer Overflow 1. Advisory Information Title: Luxology Modo 401 .LXO Integer Overflow Advisory Id: CORE-2009-0913 Advisory URL:...

CVE-2010-0766

Luxology Modo 401 is affected by CVE-2010-0766 due to an integer overflow in the Swap4 function of valet4.dll when parsing CHNL subchunks in .LXO files. An invalid length can cause the function to reverse the stack, potentially enabling code execution on a system running Luxology Modo 401 (Window...

Core Security Technologies Advisory 2009.0913

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Timeline corrected. - -------------------- Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Luxology Modo 401 .LXO Integer Overflow 1. Advisory Information Title: Luxology Modo 401 .LXO Integer Overflow Advisory...

Luxology Modo 401 .LXO Integer Overflow

Advisory ID Internal CORE-2009-0913 1. Advisory Information Title: Luxology Modo 401 .LXO Integer Overflow Advisory Id: CORE-2009-0913 Date published: 2010-03-02 Date of last update: 2010-03-02 Vendors contacted: Luxology LLC Release mode: User release 2. Vulnerability Information Class: Failure...

CVE-2009-0766

CVE-2009-0766 affects Kipper 2.01 where a directory-traversal flaw in default.php allows remote attackers to include and execute arbitrary local files via the configfile parameter. Root cause: improper handling of directory paths enabling local file inclusion. Impact: partial confidentiality/inte...

CVE-2009-0766

creationtimestamp| type| source ---|---|--- 2009-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7993...

CVE-2008-0766

CVE-2008-0766 affects Brooks Remote Print Manager (RPM) for Windows, specifically RpmSrvc.exe in RPM 4.5.1.11 and earlier (Elite and Select). The flaw is a stack-based buffer overflow triggered by a long filename in a "Receive data file" LPD command. This enables remote attackers to execute arbit...

CVE-2007-0766

CVE-2007-0766 describes a stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1. The flaw occurs when processing a long line in a .cpp file, allowing a user‑assisted remote attacker to trigger a crash (denial of service) and potentially execute arbitrary code. The connected sources corrob...

CVE-2006-0766

CVE-2006-0766 affects ICQ software on Windows (ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions). The vulnerability stems from the ability for an attacker to craft a filename that ends with a commonly trusted extension (e.g., .JPG) and potentially alter properties like co...

CVE-2005-0766

CVE-2005-0766 describes an unknown vulnerability in the Ethereal sFlow dissector that affects versions 0.9.14 through 0.10.9 and can be exploited remotely to cause a denial of service (application crash). Multiple connected sources confirm the issue is tied to the sFlow dissector in Ethereal, wit...

CVE-2004-0766

NGSEC StackDefender 2.0 contains a vulnerability in the BaseAddress handling for the kernel API hooks ZwAllocateVirtualMemory and ZwProtectVirtualMemory. The issue arises from dereferencing an invalid BaseAddress, which can lead to a system crash (denial of service). Exploitation details are not ...

CVE-2004-0766

NGSEC StackDefender 2.0 allows attackers to cause a denial of service system crash via an invalid address for the BaseAddress parameter to the hooks for the 1 ZwAllocateVirtualMemory or 2 ZwProtectVirtualMemory functions...

CVE-2003-0766

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via 1 a long FTP banner, 2 a long response to a USER command, or 3 a long response to a PASS command...

CVE-2003-0766

The CVE-2003-0766 entry describes multiple heap-based buffer overflows in an FTP Desktop client (version 3.5 and possibly earlier) that allow remote servers to execute arbitrary code. The vectors are a long FTP banner, a long response to a USER command, or a long response to a PASS command. The d...

CVE-2003-0766

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via 1 a long FTP banner, 2 a long response to a USER command, or 3 a long response to a PASS command...

CVE-2002-0766

CVE-2002-0766 affects OpenBSD 2.9–3.1. Local users can exhaust the kernel’s file descriptor table and gain root by filling fds and closing 0, 1, or 2 before executing a privileged process, in a scenario not correctly handled when an alternate descriptor cannot be opened. The issue is a race in fd...

CVE-2001-0766

CVE-2001-0766 affects Apache on MacOS X Client 10.0.3 with HFS+; a case-insensitive filesystem leads to bypassing URL-based access filters. The root cause is that Apache’s file access protection assumes a case-sensitive FS, so URLs with mixed case can bypass / restrictions, potentially exposing p...

CVE-2000-0766

The CVE-2000-0766 entry concerns the vqSoft vqServer (1.4.49) buffer overflow vulnerability. According to the sources, an attacker can trigger a buffer overflow by sending a long HTTP GET request, potentially causing denial of service or privilege elevation. Public references from CVE records and...

CVE-2000-0766

Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request...