SOL8072 - Obtaining uptime information from TCP timestamps

Timestamps are a TCP option used by a TCP/IP networking stack to implement two algorithms: the Round-Trip Time Measurement RTTM algorithm and the Protection Against Wrapped Sequence Numbers PAWS algorithm. Both algorithms are defined in RFC 1323, and are widely implemented by most modern operatin...

Code injection

The 1 NSIDSHUFFLEONLY and 2 NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors...

BIND version 8 generates cryptographically weak DNS query identifiers

Overview ISC BIND version 8 generates cryptographically weak DNS query IDs which could allow a remote attacker to poison DNS caches. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. Version 8 of the BIND...

Default Root Password in Infrant (now Netgear) ReadyNAS "RAIDiator"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory Default Root Password in Infrant now Netgear ReadyNAS "RAIDiator" Release Date: August 13, 2007 Authors: Brian Chapados [email protected] Felix Domke [email protected] Timeline: Jul 25, 2007 - discovery Jul 29, 2007 - vendor...

SQL SERVER Database Password vulnerability-vulnerability warning-the black bar safety net

Track a bit the SQL SERVER Database Server login process, and found that the password calculation is very vulnerable, a SQL SERVER Database Password vulnerability embodied in two aspects: 1, A network login when the password encryption algorithm 2, The database storage of the password encryption...

OpenSSL本地密钥信息泄露漏洞

BUGTRAQ ID: 25163 CVECAN ID: CVE-2007-3108 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 某些RSA的实现上存在可重建密钥的漏洞，OpenSSL基于SSLeay，提供RSA算法的加密支持，本地攻击者可能利用此漏洞通过RSA算法解密加密信息的内容。 多种使用了OpenSSL的产品可能受此漏洞影响。 OpenSSL Project OpenSSL 0.9.8e OpenSSL Project OpenSSL 0.9.8d OpenSSL Project OpenSSL 0.9.8c...

[SECURITY] Fedora 7 Update: spamassassin-3.2.1-1.fc7

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

Multiple vendors ZOO file decompression infinite loop DoS

Topic: Multiple vendors ZOO file decompression infinite loop DoS Announced: 2007-05-04 Credits: Jean-Sebastien Guay-Leroux Products: Multiple see section III Impact: DoS 99 CPU utilisation CVE ID: CVE-2007-1669, CVE-2007-1670, CVE-2007-1671, CVE-2007-1672, CVE-2007-1673 I. BACKGROUND Zoo is a...

Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service

Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service / source: https://www.securityfocus.com/bid/23823/info The Zoo compression algorithm is prone to a remote denial-of-service vulnerability. This issue arises when applications implementing the Zoo algorithm process certain malformed...

Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service

/ source: https://www.securityfocus.com/bid/23823/info The Zoo compression algorithm is prone to a remote denial-of-service vulnerability. This issue arises when applications implementing the Zoo algorithm process certain malformed archives. A successful attack can exhaust system resources and...

Crack Microsoft scripting encryption algorithm-bug warning-the black bar safety net

Copy the following code to the txt file, use the ex to modify the suffix . vbs. You can easily modify for visual basic or ASP program; option explicit Dim oArgs, NomFichier 'Optional argument : the encoded filename NomFichier="" Set oArgs = WScript. Arguments Select Case oArgs. Count Case 0 'No...

[SECURITY] Fedora Core 5 Update: gnupg-1.4.7-1

GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...

Design/Logic Flaw

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

CVE-2007-1327

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

CVE-2007-1327

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

silce-server router DoS

Invalid authentication hash algorithm with empty cipher causes NULL pointer crash...

[SECURITY] Fedora Core 6 Update: spamassassin-3.1.8-1.fc6

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

Jetty Non-random Session ID Vulnerability

Binary data 3904.prm...

Unix/BSD/Linux the password mechanism of the century-vulnerability and early warning-the black bar safety net

Freebird [email protected] 1. Overview Early U N I X system to a user password stored in a plain text readable“password file”, which may be in the system administrator's attention to the case of not being intercepted and exposed. It also may have been in one accident in the leak. From AT&T UNIX...

Skillfully crack open someone ASP Trojan password method-vulnerability warning-the black bar safety net

Crack the objective: to crack a encrypted Asp Trojan login password. Since the Trojan there is no version described, specific also don't know what this Trojan is called what name. Crack idea: the two, with the encrypted password replaces the ciphertext and use the ciphertext and the encryption...