2278 matches found
McAfee加密USB管理器远程安全绕过漏洞
BUGTRAQ ID:30630 CNCAN ID：CNCAN-2008081202 McAfee Encrypted USB Manager是一款采用强大的加密技术，并结合强式存取控制方法来保护资料的解决方案。 McAfee Encrypted USB Manager存在安全绕过问题，远程攻击者可以利用漏洞执行离线攻击尝试猜测密码。 此漏洞只存在于当密码"Re-use Threshold"策略设置为非零值才有效，目前没有详细漏洞细节提供。 0 McAfee Encrypted USB Manager 3.1 0 升级到最新版本： McAfee Encrypted USB Manager...
openSUSE 10 Security Update : samba (samba-2584)
"A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. In addition the following changes are included with these packages : - Disable broken DCERPC funnel patch; 242833. - Avoid winbind event handler for internal domains. - Fix smbcontrol winbind offline;...
Vulnerability in Credant Mobile Guardian Shield for Windows
Vulnerability in Credant Mobile Guardian Shield for Windows Vendor: Credant Technologies Inc. http://www.credant.com/ Product: Credant Mobile Guardian Shield for Windows Version: 5.2.1.105 and prior Affected Operating Systems: Windows XP SP2 and likely others Product Overview: Credant Technologie...
CVE-2007-0413
BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file...
CVE-2007-0413
CVE-2007-0413 - MODE C BEA WebLogic Server versions 8.1 through 8.1 SP5 store cleartext data in a backup of config.xml after offline editing. This allows local users to obtain sensitive information by reading the backup file. The vulnerability is due to storing sensitive configuration data in an ...
Block MSN Messenger Live 8
Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...
Hacking quest dove gray is not on-line analysis summary-vulnerability warning-the black bar safety net
Not automatically on-line of reason: 1. You do not have public IP or you are within the network did not do the appropriate port mapping; 2. You opened the firewall closes the Dove gray to use to the port; 3. You do not have to update the IP to your domain name; 4. Your service-side configuration...
Thoroughly get super star--try it!- Vulnerability warning-the black bar safety net
A. Installation article 1. Installation If you previously installed a super star, please you go first in Control Panel to remove the super-star, and the installation directory deleted, and then in the registry, REGEDIT to delete the Super Stars. As follows: HKEYCURRENTUSERSoftware SUPERSTAR...
CVE-2006-4068
The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...
CVE-2006-4068
The CVE concerns a client-side pswd.js script that relies on the user’s environment to verify a username/password against hard-coded hashed values on the server. The hashing scheme reportedly produces a large number of collisions, which can ease offline brute-force attempts by an attacker. The de...
CVE-2006-4068
The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...
CentOS 3 : evolution (CESA-2005:238)
Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...
DEBIAN-CVE-2005-4683
PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...
RHEL 3 : evolution (RHSA-2005:238)
Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...
CVE-2005-0737
Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode...
CVE-2005-0737
CVE-2005-0737 describes a buffer overflow in Yahoo! Messenger that allows remote attackers to execute arbitrary code via the offline mode. The vulnerability is associated with Yahoo! Messenger; the underlying cause is a buffer overflow condition, enabling potential arbitrary code execution and im...
Yahoo Messenger Instang messaging agent buffer overflow
Buffer overflow during offline status message displaying...
asleap - offline LEAP authentication hacking
MS-CHAP NTLM vulnerability allows offline passwords attacks...
Release of Cisco Attack tool Asleap
In August 2003, I wrote a tool called asleap for Linux systems to exploit a weakness in the Cisco LEAP authentication protocol. Using this tool, an attacker can actively compromise Cisco LEAP networks by mounting an offline dictionary attack against weak user passwords. In my testing, I was able ...