8201 matches found
Solaris Socket Hijack
/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...
Solaris (SPARC/x86) - Local Socket Hijack
/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...
Solaris (SPARCx86) - Local Socket Hijack
Solaris SPARCx86 - Local Socket Hijack / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of...
Solaris SPARC / x86 Local Socket Hijack Exploit
Exploit for solaris platform in category local exploits =============================================== Solaris SPARC / x86 Local Socket Hijack Exploit =============================================== / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug...
CVE-2002-1947
Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session...
CVE-2002-1672
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions world readable, which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials...
CVE-2005-0134
The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets...
[Full-disclosure] Statcounter Script Injection User Session Hijack
Statcounter Script Injection User Session Hijack Class Input Validation & Session Hijack Remote Local Published / Updated Yes Yes 04th May 2005 Vulnerable http://www.statcounter.com/ All users of websites using the statcounter services Not Vulnerable - Discussion Statcounter.com is one of the bes...
CVE-2005-0079
Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service application crash and hijack the desktop session...
CVE-2005-0079
Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service application crash and hijack the desktop session...
DEBIAN-CVE-2005-0079
Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service application crash and hijack the desktop session...
CVE-2001-0163
Cisco AP340 base station is affected by CVE-2001-0163, which causes predictable TCP Initial Sequence Numbers (ISNs) enabling a attacker to spoof or hijack TCP connections. The vulnerability is described across CVE records and corroborated by Nessus (TCP/IP Predictable ISN). The available document...
CVE-2004-0641
The CVE-2004-0641 issue affects Thomson SpeedTouch 510 ADSL Router (firmware GV8BAA3.270, and possibly earlier). The vulnerability arises from a predictable TCP Initial Sequence Number (ISN) generator, enabling remote attackers to spoof or hijack TCP connections. Exploitation details are describe...
security flaw
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...
security flaw
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...
Mitel 3300 ICP IP PBX VOIP device Web session hijack
Predictable session id allos to hijack Web administration session...
CVE-2004-0866
CVE-2004-0866 involves Internet Explorer 6.0. The vulnerability allows websites to set cookies for country‑specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a remote attacker to perform a session fixation attack and hijack a user’s HTTP session. The provided documen...
D-BUS message bus system session hijack
Malicious local user can connect to another user's session bus...
CVE-2005-0079
CVE-2005-0079 affects xtrlock 2.0, where a buffer overflow allows local users to cause a denial of service (application crash) and potentially hijack the desktop session. The vulnerability is confirmed across multiple feeds (NVD, OSV, Debian DSA, OpenVAS, Nessus) and is described as a local, low-...
