security flaw

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

security flaw

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

MuOnline Loopholes Web Server (pkok.asp) SQL Injection Exploit

No description provided by source. !-- Save this code as .htm and replace SITE/SQLCODE to your server address Some SQL Examples: -Changing character data- update character set...

CVE-2005-3177

CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions,...

security flaw

snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...

Advisory: WZCS vulnerabilities

Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...

security flaw

snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...

CVE-2005-3087

The SecureW2 3.0 TLS implementation uses weak random number generators rand and srand from system time during generation of the pre-master secret PMS, which makes it easier for attackers to guess the secret and decrypt sensitive data...

CVE-2005-3087: Undefined Security Weakness

The SecureW2 3.0 TLS implementation uses weak random number generators rand and srand from system time during generation of the pre-master secret PMS, which makes it easier for attackers to guess the secret and decrypt sensitive data...

SecureW2 weak encryption

Weak PRNG generation algorithm for TLS pre-master key...

[Full-disclosure] SecureW2 TLS security problem

Hi everyone! I was looking at the code for a TLS implementation, an open source implementation "SecureW2" by Alfa & Ariss, see: http://www.securew2.com/uk/index.htm I found that it uses weak random numbers when generating the pre-master-secret. The code is in "./Components/Common/release 3/versio...

DEBIAN-CVE-2005-2069

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

CVE-2004-1492

CVE-2004-1492 concerns the game Master of Orion III (versions up to 1.2.5 and earlier). The vulnerability arises in how the game processes an incoming data packet that contains a large size specifier, triggering a large memory allocation that can fail and cause a remote denial of service (the gam...

CVE-2004-1493

Master of Orion III 1.2.5 and earlier is affected. The issue allows remote attackers to cause a denial of service (server crash) via multiple connections using long nicknames, possibly triggering a buffer overflow. Root cause isn’t explicitly detailed in the provided documents beyond this descrip...

CVE-2004-1492

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...

CVE-2004-1493

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...

CVE-2004-1493: Undefined Security Weakness

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...

CVE-2004-1492: Undefined Security Weakness

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...

CVE-2004-1492

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...

CVE-2004-1493

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...