ProductCart 1.x/2.x - 'Custva.asp?redirectUrl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow fo...

Kerberos 4 Realm Principle Impersonation

The remote host is running Kerberos IV. It has been demonstrated that the Kerberos IV protocol has inherent design flaws that make it insecure to use. C Tenable Network Security, Inc. Ref: Delivered-To: moderator for [email protected] To: [email protected] Subject:...

[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 266-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 266-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...

RADIUS protocol and implementation weakness

There are few cryptographic problems allow to analize sniffed traffic. There is a possibility of request spoofing. Some implementation problems allow to DoS server or to elevate priveges...