MiM Simultaneous close attack

MiM simultaneous CLOSE attack Revision 1.1 For Public Release 2001 August 07 08:00 GMT +0200 Vulnerability : MiM simultaneous CLOSE attack Vendor : N/A Category : Man in the middle / Denial of service Date : 08/07/2001 Credits : Korhan Kaya [email protected] Document ID : MW-TCPMD-03...

m-i-t-m - атака против Messenger/Hotmail

No description provided...

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

Overview WinVNC's challenge/response mechanism can allow an intruder to obtain legitimate credentials from a valid client in order to gain unauthorized access to the server. Description AT&T WinVNC is a free package available from AT&T Labs Cambridge that allows an existing desktop of a PC to be...

Logitech vulnerability (DoS, man-in-the-middle-attack) - Resend

Preface: Every information provided is based on the tested devices. We cannot ensure that other sets, sold elsewhere, may be vulnerable OR NOT! Devices tested: Logitech Cordless Desktop, sold in Germany. Keyboard: M/N: Y-RC14 P/N: 867097-0102 125283-401A S/N: MCU04607129 Working at 27.145 MHz in...

Проблемы беспроводных клавиатур (man-in-the-middle)

Можно отслеживать и имитировть нажатия на клавиши...

CVE-2001-1473

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows th...

Advisory: PGP 7.0 signature verification vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Pretty Good Privacy Severity: Medium to high Impact: Users with write access to signed exported key blocks may replace them with arbitrary keys without any warning being issued upon import of those keys Local: Yes Remote: No though...

SSH-1 allows client authentication to be forwarded by a malicious server to another server

Overview A design flaw in the SSH-1 protocol allows a malicious server to establish two concurrent sessions with the same session ID, allowing a man-in-the-middle attack. The client must accept unknown host keys from the malicious server to enable exploitation of this vulnerability. Description...

rlogin Service Detection

The rlogin service is running on the remote host. This service is vulnerable since data is passed between the rlogin client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If th...

rsh Service Detection

The rsh service is running on the remote host. This service is vulnerable since data is passed between the rsh client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host...

alibaba.2.0.genkey.txt

Date: Fri, 21 May 1999 14:39:00 GMT From: [email protected] Chris Cowley Subject: Vulnerability in Windows SSL server and common browsers Some time ago, I downloaded a trial version of an SSL web server product for Windows NT called 'Alibaba 2.0' for evaluation as a possible SSL solution. I...

Security Update For Exchange Server 2016 CU12 (KB4509409)

The security update addresses 3 vulnerabilities: An information disclosure vulnerability exists when Microsoft Exchange Server allows creation of entities with Display Names having non-printable characters. An elevation of privilege vulnerability when an attacker executes a man-in-the-middle atta...