CVE-2006-4068

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...

CVE-2006-4068

The CVE concerns a client-side pswd.js script that relies on the user’s environment to verify a username/password against hard-coded hashed values on the server. The hashing scheme reportedly produces a large number of collisions, which can ease offline brute-force attempts by an attacker. The de...

CVE-2006-4068

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...

CVE-2006-4068: Undefined Security Weakness

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...

CentOS 3 : evolution (CESA-2005:238)

Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...

DEBIAN-CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

RHEL 3 : evolution (RHSA-2005:238)

Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...

CVE-2005-0737

Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode...

CVE-2005-0737

CVE-2005-0737 describes a buffer overflow in Yahoo! Messenger that allows remote attackers to execute arbitrary code via the offline mode. The vulnerability is associated with Yahoo! Messenger; the underlying cause is a buffer overflow condition, enabling potential arbitrary code execution and im...

CVE-2005-0737: Undefined Security Weakness

Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode...

Yahoo Messenger Instang messaging agent buffer overflow

Buffer overflow during offline status message displaying...

asleap - offline LEAP authentication hacking

MS-CHAP NTLM vulnerability allows offline passwords attacks...

Release of Cisco Attack tool Asleap

In August 2003, I wrote a tool called asleap for Linux systems to exploit a weakness in the Cisco LEAP authentication protocol. Using this tool, an attacker can actively compromise Cisco LEAP networks by mounting an offline dictionary attack against weak user passwords. In my testing, I was able ...

CVE-2002-0818

wwwoffled in World Wide Web Offline Explorer WWWOFFLE allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value...

CVE-2002-0818: Undefined Security Weakness

wwwoffled in World Wide Web Offline Explorer WWWOFFLE allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value...

Buffer overflow in WWW Offline Explorer

Buffer overflow on negative Content-Length...

CVE-2001-0038

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter e.g. C: in the requested URL...

CVE-2001-0038

Offline Explorer 1.4 is affected by a local file read vulnerability present before Service Release 2. An attacker could specify a drive letter (for example C:) in the requested URL to read arbitrary files on the system. Root cause: inadequate validation of the URL drive letter in requests. Impact...

CVE-2001-0038

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter e.g. C: in the requested URL...

CVE-2001-0038: Undefined Security Weakness

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter e.g. C: in the requested URL...