nCipher Cryptographic Hardware Interface Library cryptographic weakness

On process forking random bytes cache is not clearing, leading to same pseudorandom sequence is generated with few child processes...

Hardware Cisco IP phones SIP messages spoofing

Due to insufficient data validation an attacker can send Messages-Waiting message to phone...

Mandrake Linux Security Advisory : kernel (MDKSA-2005:110)

Multiple vulnerabilities in the Linux kernel have been discovered and fixed in this update. The following CVE names have been fixed in the LE2005 kernel : Colin Percival discovered a vulnerability in Intel's Hyper-Threading technology could allow a local user to use a malicious thread to create...

USN-131-1: Linux kernel vulnerabilities

Colin Percival discovered an information disclosure in the "Hyper Threading Technology" architecture in processors which are capable of simultaneous multithreading in particular Intel Pentium 4, Intel Mobile Pentium 4, and Intel Xeon processors. This allows a malicious thread to monitor the...

[Full-disclosure] [USN-131-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-131-1 May 23, 2005 linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities CAN-2005-0109, CAN-2005-1041, CAN-2005-1263, CAN-2005-1264, CAN-2005-1368, CAN-2005-1369, CAN-2005-1589...

CVE-2005-1036

FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges...

CVE-2005-0127

Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine...

CVE-2005-0539

Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...

FreeBSD amd64 platform privilege escalation

Userland process can access phisical hardware...

FreeBSD Security Advisory FreeBSD-SA-05:03.amd64

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:03.amd64 Security Advisory The FreeBSD Project Topic: unprivileged hardware access on amd64 Category: core Module: sysamd64 Announced: 2004-04-06 Credits: Jari...

FreeBSD-SA-05:03.amd64

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:03.amd64 Security Advisory The FreeBSD Project Topic: unprivileged hardware access on amd64 Category: core Module: sysamd64 Announced: 2005-04-06 Credits: Jari...

Symantec hardware firewall devices SMTP messages leak

Under certain conditions SMTP messages may be sent with insecure external connection instead of internal one...

CVE-2005-0539

Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...

CVE-2005-0539: Undefined Security Weakness

Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...

Thomson TCW690 POST Password Validation Exploit

No description provided by source. / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK murdok.lnx at gmail.com Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690...

Thomson TCW690 - POST Password Validation

Thomson TCW690 - POST Password Validation / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password...

CVE-2005-0127

Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine...

CVE-2005-0127: Undefined Security Weakness

Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine...

DSA-640-1 gatos - buffer overflow

Bulletin has no description...

CVE-2004-0320

Unknown vulnerability in nCipher Hardware Security Modules HSM 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands...