FreeBSD-SA-05:09.htt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:09.htt Security Advisory The FreeBSD Project Topic: information disclosure when using HTT Category: core Module: sys Announced: 2005-05-13 Revised: 2005-05-13...

kernel -- information disclosure when using HTT

Problem description and impact When running on processors supporting Hyper-Threading Technology, it is possible for a malicious thread to monitor the execution of another thread. Information may be disclosed to local users, allowing in many cases for privilege escalation. For example, on a...

NotifyLink server provides inadequate protection for cryptographic key material

Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...

CVE-2005-0109

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...

Hydra: PC-NFS

This plugin runs Hydra to find PC-NFS accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

CVE-2000-0259

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users...

Security Bulletin (MS00-024)

Microsoft Security Bulletin MS00-024 - -------------------------------------- Tool Available for "OffloadModExpo Registry Permissions" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a tool that installs tighter permissions on a Windows NTr 4.0 registry key...

key.randomness.backfire.txt

Date: Thu, 11 Mar 1999 15:02:01 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Are your secrets safe? crypto http://www.newscientist.com/cgi-bin/pageserver.cgi?/ns/19990313/newsstory3.html Are your secrets safe? Duncan Graham-Rowe THEY MAY LOOK HARMLESS but screensavers could betray you...