3483 matches found
Important: Red Hat Security Advisory: : Updated mod_ssl packages available
Updated modssl packages for Red Hat Linux 7, 7.1, and 7.2 are available which close a buffer overflow in modssl. When session caching is enabled, modssl will serialize SSL session variables to store them for later use. Unpatched versions of modssl prior to version 2.8.7 which use the 'shm' or 'db...
mod_ssl Buffer Overflow Condition (Update Available)
modssl Buffer Overflow Condition Update Available -------------------------------------------------------- SYNOPSIS modssl www.modssl.org is a commonly used Apache module that provides strong cryptography for the Apache web server. The module utilizes OpenSSL formerly SSLeay for the SSL...
CVE-2001-0936
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request...
Alert: Vulnerability in frox transparent ftp proxy.
There is a security hole in all the 0.6.x versions of the frox transparent ftp proxy up to and including version 0.6.6. Version 0.6.7 fixes this vulnerability, and upgrading to this is advised. Development snapshots are also affected up to and including frox-20011031.tar.gz. The vulnerability is...
CVE-2001-0175
CVE-2001-0175 affects the Netscape Fasttrack Server 4.1 caching module. The vulnerability allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs. No exploits or remediation details are provided in the connected documents.
Проблемы с RSA BSAFE SSL (unauthorized access)
Ошибка в кэшировании сертификатов позволяет подключиться с недействительным сертификатом...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
RedHat 6.1/6.2/7.0/7.1 - Man Cache File Creation
source: https://www.securityfocus.com/bid/2815/info A vulnerability exists in the 'man' system manual pager program. It is possible for local users to cause man to cache files in the system cache directory from outside of the configured manual page hierarchy search path. Combined with the...
Уязвимость ipfilter (fragment caching filter bypass)
При проверке фрагментированного пакета не проверяются порты и флаги пакета, только адреса и ip id, если ip id имеется в кэше...
Serious bug in IPFilter
A VERY serious bug has been brought to my attention in IPFilter. In 10 words or less, fragment caching with can let through "any" packet. Ok, so that's 8. Cause ===== When matching a fragment, only srcip, dstip and IP ID are checked and the fragment cache is checked before any rules are checked. ...
defcom.netscape-fasttrack.txt
====================================================================== Defcom Labs Advisory def-2001-05 Netscape Fasttrack Server Caching DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...
def-2001-05: Netscape Fasttrack Server Caching DoS
====================================================================== Defcom Labs Advisory def-2001-05 Netscape Fasttrack Server Caching DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...
mod_sqlpw Password Caching Bug
The modsqlpw module for ProFTPD caches the user id and password information returned from the mysql database when attempting to verify a password. When the "user" command is used to switch to another account, the cached password is not cleard, and the password entered is checked against the cache...
Дырка в ProFTPD (mod_sqlpw Password Caching)
Авторизованный пользоватлеь может переключиться в другого не зхная пароля...
aim.caching.txt
% Advisory % Advisory % Advisory % Advisory % Advisory % Advisory % Author: f3d Program: AOL Instant Messanger Servers/Clients Fault: Caching vulnerability Os: Win/BSD/Aim compatible % Advisory % Advisory % Advisory % Advisory % Advisory % Advisory % Problem. There is a vulnerability in AOL Insta...
CVE-1999-0387
CVE-1999-0387 affects Windows 95/98 where a legacy credential caching mechanism can be exploited to read plaintext network passwords. The Red Hat and CVE records reflect the same description: a local/system-level weakness in the credential cache that may expose confidential credentials. Documents...
CVE-1999-0387
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...
CVE-1999-1104
Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...