Session fixation

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

CVE-2012-1803

CVE-2012-1803 affects RuggedCom Rugged Operating System (ROS) 3.10.x and earlier. A factory account with a password derived from the MAC Address field in the banner allows remote attackers to gain access by computing the password and then establishing TELNET, remote shell (rsh), or serial-console...

RuggedCom Devices - Backdoor Access

Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial Strength" and "Hardened" networking equipment. You'll find...

CVE-2010-1803

Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume...

CVE-2010-1803

Technical details about CVE-2010-1803 are not publicly provided in the supplied connected documents. Please monitor vendor advisories and security trackers for updates.

CVE-2009-1803

CVE-2009-1803 affects FreePBX 2.5.1 and other 2.4.x, 2.5.x, and pre-release 2.6.x; the vulnerability stems from different error messages shown on failed login attempts, which reveals whether a user account exists. This behavioral difference enables remote attackers to enumerate valid usernames. T...

Debian: Security Advisory (DSA-1803-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1803-1 : nsd, nsd3 - buffer overflow

Ilja van Sprundel discovered that a buffer overflow in NSD, an authoritative name service daemon, allowed to crash the server by sending a crafted packet, creating a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora Update for rdesktop FEDORA-2008-3985

Check for the Version of rdesktop OpenVAS Vulnerability Test Fedora Update for rdesktop FEDORA-2008-3985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for rdesktop FEDORA-2008-3886

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rdesktop FEDORA-2008-3917

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rdesktop FEDORA-2008-3985

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200806-04 (rdesktop)

The remote host is missing updates announced in advisory GLSA 200806-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : rdesktop (rdesktop-5271)

Multiple problems have been fixed in rdesktop. CVE-2008-1801, CVE-2008-1802 and CVE-2008-1803 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rdesktop-5271. T...

SuSE 10 Security Update : rdesktop (ZYPP Patch Number 5272)

Multiple problems have been fixed in rdesktop. CVE-2008-1801 / CVE-2008-1802 / CVE-2008-1803 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

RHEL 5 : rdesktop (RHSA-2008:0575)

An updated rdesktop package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

rdesktop security update

1.4.1-6 - Update the prototype for xrealloc as well. - Fix bug 452978, cve-2008-1803 - Fix bug 452978, cve-2008-1801...

Debian Security Advisory DSA 1573-1 (rdesktop)

The remote host is missing an update to rdesktop announced via advisory DSA 1573-1. OpenVAS Vulnerability Test $Id: deb15731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1573-1 rdesktop Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fedora 8 : rdesktop-1.6.0-1.fc8 (2008-3917)

Tue May 13 2008 Soren Sandmann - 1.6.0-1 - Update to 1.6.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1573-1 : rdesktop - several vulnerabilities

Several remote vulnerabilities have been discovered in rdesktop, a Remote Desktop Protocol client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1801 Remote exploitation of an integer underflow vulnerability allows attackers to execute arbitrary...