Microsoft Windows DNS server and DNS client DNS reply spoofing

Weak pseudo-random generator is used to generate DNS request ID...

CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

Design/Logic Flaw

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

CVE-2008-3072

CVE-2008-3072 affects Simple Machines Forum (SMF) versions 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 when running under PHP versions earlier than 4.2.0. The issue is that the random number generator is not seeded properly, with an impact that is currently described as unknown. The provided d...

CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

Information disclosure

The PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors...

CVE-2008-3048

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."...

Code injection

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."...

CVE-2008-3049

The PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors...

Code injection

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors...

CVE-2008-3050

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors...

CVE-2008-3049

Technical details (affected component, versions, root cause, exploit vectors) are not provided in the supplied documents. Monitor for updates from NVD/CVE databases for clarified impact and remediation.

CVE-2008-3048

CVE-2008-3048 concerns the PDF Generator 2 (pdf_generator2) extension for TYPO3 (versions 0.5.0 and earlier). The vulnerability is described as unspecified with unknown impact and attack vectors, related to an "Unprotected test functionality." The connected documents provide the affected product ...

CVE-2008-3050

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors...

CVE-2008-3050

The CVE-2008-3050 entry affects TYPO3’s PDF Generator 2 extension (pdf_generator2) up to version 0.5.0 and earlier. The vulnerability is described as an unspecified DoS vector that attackers can trigger, but no concrete root cause, exploit method, affected subcomponents, or workaround is provided...

CVE-2008-3049

The PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors...

CVE-2008-3048

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."...

Fedora 8 : php-5.2.6-2.fc8 (2008-3864)

This release updates PHP to the latest upstream version 5.2.6, fixing multiple bugs and security issues. See upstream release notes for further details: http://www.php.net/releases/525.php http://www.php.net/releases/526.php It was discovered that the PHP escapeshellcmd function did not properly...

SOL8874 - OpenSSL packages contain a predictable random number generator - VU#925211

A vulnerability in the OpenSSL package included with the Debian GNU/Linux operating system and its derivatives may cause weak cryptographic keys to be generated. Information about this advisory is available at the following location:...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...