Ubuntu Update for postgresql-8.4 USN-1229-1

Ubuntu Update for Linux kernel vulnerabilities USN-1229-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12291.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for postgresql-8.4 USN-1229-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : postgresql-8.3, postgresql-8.4 vulnerability (USN-1229-1)

It was discovered that the blowfish algorithm in the pgcrypto module incorrectly handled certain 8-bit characters, resulting in the password hashes being easier to crack than expected. An attacker who could obtain the password hashes would be able to recover the plaintext with less effort. Note...

Ubuntu: Security Advisory (USN-1229-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1229-1: PostgreSQL vulnerability

It was discovered that the blowfish algorithm in the pgcrypto module incorrectly handled certain 8-bit characters, resulting in the password hashes being easier to crack than expected. An attacker who could obtain the password hashes would be able to recover the plaintext with less effort...

SuSE 11.1 Security Update : yast2-core (SAT Patch Number 5078)

This update of yast2-core fixes security issues and a bug : - When setting a password for a user, use blowfish algorithm id 2y instead of 2a. bnc700876 / CVE-2011-2483 - Log YCP client arguments only with y2debug, not to reveal AutoYaST passwords. bnc492746 - ini-agent: Fixed a test failure 'wron...

SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035

Check for the Version of glibc,pam-modules,libxcrypt,pwdutils OpenVAS Vulnerability Test SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

SUSE: Security Advisory for glibc, pam-modules, libxcrypt, pwdutils (SUSE-SA:2011:035)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2011-2483

cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...

SuSE 10 Security Update : glibc (ZYPP Patch Number 7659)

The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...

SuSE9 Security Update : glibc suite (YOU Patch Number 12813)

The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...

PHP -- crypt() returns only the salt for MD5

PHP development team reports: If crypt is executed with MD5 salts, the return value consists of the salt only. DES and BLOWFISH salts work as expected...

Accellion FTA MPIPE2 Command Execution

This module exploits a chain of vulnerabilities in the Accellion File Transfer appliance. This appliance exposes a UDP service on port 8812 that acts as a gateway to the internal communication bus. This service uses Blowfish encryption for authentication, but the appliance ships with two easy to...

Accellion File Transfer Appliance MPIPE2 - Command Execution (Metasploit)

$Id: accellionftampipe2.rb 11935 2011-03-11 17:37:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SplashID 5.5 / SplashID Lite 4.6 For iPhone Password Caching Issue

I submitted this vulnerability report about the password database SplashID to cert.org in early November 2010. CERT bounced it back saying they were too busy. No big deal, so I sent it to the product's vendor, SplashData, on 11/5/2010. I worked with SplashData for a few weeks to help them...

IT-Grundschutz M4.036: Sperren bestimmter Faxempfänger-Rufnummerne

IT-Grundschutz M4.036: Sperren bestimmter Faxempfänger-Rufnummerne. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94201 Diese Prüfung bezieht sich auf die 11...

openSUSE libxcrypt不安全口令哈希漏洞

BUGTRAQ ID: 30301 CVECAN ID: CVE-2008-3188 openSUSE是一个易于安装SUSE Linux操作系统版本。 openSUSE使用libxcrypt库计算口令的哈希值，可以配置为使用DES、MD5或blowfish。由于libxcrypt库中的一个漏洞，即使/etc/default/passwd文件中已经配置了MD5，系统仍会忽略这个设置使用DES算法。相对较弱的算法可能有助于攻击者的暴力破解。 S.u.S.E. openSUSE 11.0 S.u.S.E. -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Fedora 7 : phpMyAdmin-2.11.5.1-1.fc7 (2008-2874)

This update addresses PMASA-2008-2 / CVE-2008-1567: phpMyAdmin upstream received an advisory from Jim Hermann: It saves sensitive information like the MySQL username and password and the Blowfish secret key in session data, which might be unprotected on a shared host...

CVE-2008-1567

phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...

DEBIAN-CVE-2008-1567

phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...

CVE-2008-1567

phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...