CVE-2015-4442

...

CVE-2015-4442

CVE-2015-4442 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-4442

The CVE concerns the rack-mini-profiler gem for Ruby, specifically versions before 0.10.1. The underlying issue is an incorrect ordering of security checks that can allow remote attackers to obtain sensitive information about allocated strings and objects. This is confirmed in multiple connected ...

Fedora Update for pwgen FEDORA-2014-16406

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2013-4442

Password Generator aka Pwgen before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers...

CVE-2013-4442

Password Generator aka Pwgen before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers...

Updated pwgen package fixes security vulnerabilities

Updated pwgen package fixes security vulnerabilities: Pwgen was found to generate weak non-tty passwords by default, which could be brute-forced with a commendable success rate, which could raise security concerns CVE-2013-4440. Pwgen was found to silently falling back to use standard pseudo...

CVE-2013-4442

Pwgen (Password Generator) prior to version 2.07 was vulnerable because it used weak pseudo-random numbers when /dev/urandom was unavailable, allowing context-dependent attackers to potentially guess generated passwords. Public advisories and OSV/NVD records describe fixes in pwgen-2.07 and later...

Fedora 19 : pwgen-2.07-1.fc19 (2014-16473)

Update to 2.07 bug 1159526 fixes : - CVE-2013-4440 bug 1020222, 1020223 - CVE-2013-4442 bug 1020259, 1020261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora Update for pwgen FEDORA-2014-16473

Check the version of pwgen SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868608";...

Fedora 20 : pwgen-2.07-1.fc20 (2014-16368)

Update to 2.07 bug 1159526 fixes : - CVE-2013-4440 bug 1020222, 1020223 - CVE-2013-4442 bug 1020259, 1020261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 21 : pwgen-2.07-1.fc21 (2014-16406)

Update to 2.07 bug 1159526 fixes : - CVE-2013-4440 bug 1020222, 1020223 - CVE-2013-4442 bug 1020259, 1020261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

CVE-2012-4442

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...

CVE-2012-4442

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...

CVE-2012-4442

Summary: CVE-2012-4442 affects Monkey HTTP Daemon 0.9.3. The issue arises because the daemon retains the supplementary group IDs of the root account while operating with a non-root effective UID, which could allow local users to bypass file-read restrictions due to a race condition in a file-perm...

CVE-2010-4442

Technical details for CVE-2010-4442 are not publicly provided in the supplied documents; no affected product/version or root cause is specified. Monitor for updates.

Sun Java System DSEE Multiple Vulnerabilities (Windows)

This host is running Sun Java System Directory Server Enterprise Edition DSEE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsunjavadirservermultvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Sun Java System DSEE Multiple Vulnerabilities Windows Authors: Sharath ...

CVE-2009-4442

CVE-2009-4442 affects Sun Java System Directory Proxy Server (DPS) / Sun Directory Server Enterprise Edition 6.0–6.3.1. The issue is improper handling of max-client-connections, allowing remote attackers to exhaust connection slots via multiple idle connections, leading to DoS. Multiple connected...

CVE-2007-4442

CVE-2007-4442 concerns the Unreal Engine: a stack-based buffer overflow in the engine’s logging function (used by its internal web server) may be triggered by a request for a long .gif filename in the images/ directory. The root cause is described as a Unicode-to-ASCII conversion issue, potential...

CVE-2006-4442

CVE-2006-4442 is an XSS vulnerability in PHP iAddressBook prior to 0.95, exploitable via the cat_name parameter during category addition (categories field). The NVD entry lists a CVSSv2 base score of 6.8 (MEDIUM) with network attack vector and partial impact on confidentiality, integrity, and ava...