Cisco Ironport Appliances Privilege Escalation Exploit

Cisco Ironport appliances are vulnerable to authenticated "admin" privilege escalation. By enabling the Service Account from the GUI or CLI allows an admin to gain root access on the appliance, therefore bypassing all existing "admin" account limitations. The vulnerability is due to weak algorith...

Cisco Ironport Appliances - Privilege Escalation

/ Cisco Ironport Appliances Privilege Escalation Vulnerability Vendor: Cisco Product webpage: http://www.cisco.com Affected versions: Cisco Ironport ESA - AsyncOS 8.5.5-280 Cisco Ironport WSA - AsyncOS 8.0.5-075 Cisco Ironport SMA - AsyncOS 8.3.6-0 Date: 22/05/2014 Credits: Glafkos Charalambous...

[ MDVSA-2015:008 ] pwgen

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:008 http://www.mandriva.com/en/support/security/ Package : pwgen Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated pwgen package fixes security vulnerabilities: Pwgen was foun...

[SECURITY] Fedora 19 Update: pwgen-2.07-1.fc19

pwgen generates random, meaningless but pronounceable passwords. These passwords contain either only lowercase letters, or upper and lower case, or upper case, lower case and numeric digits. Upper case letters and numeric digits are placed in a way that eases memorizing the password...

[SECURITY] Fedora 21 Update: pwgen-2.07-1.fc21

pwgen generates random, meaningless but pronounceable passwords. These passwords contain either only lowercase letters, or upper and lower case, or upper case, lower case and numeric digits. Upper case letters and numeric digits are placed in a way that eases memorizing the password...

[SECURITY] Fedora 20 Update: pwgen-2.07-1.fc20

pwgen generates random, meaningless but pronounceable passwords. These passwords contain either only lowercase letters, or upper and lower case, or upper case, lower case and numeric digits. Upper case letters and numeric digits are placed in a way that eases memorizing the password...

MGASA-2014-0483 Updated moodle package fixes security vulnerabilities

In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...

Strip Password Generator 0.3/0.4/0.5 Limited Password-Space Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem with Strip makes it possible...

CVE-2013-1941: Undefined Security Weakness

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack...

FreeBSD : drupal -- multiple vulnerabilities (d9649816-5e0d-11e3-8d23-3c970e169bc2)

Drupal Security Team reports : Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. - Multiple vulnerabilities due to optimistic cross-site request forgery protection Form API validation - Drupal 6 and 7 - Multiple vulnerabilities due to weakness in pseudorandom numb...

KDE Paste Applet

The paste applet included with kdeplasma-addons allows you to define macros that will copy some generated data into the clipboard, using simple macros to define the source and format of the data. The available macros include password... which generates "random" passwords. Here is the code that...

Trend Micro DirectPass 1.5.0.1060 - Multiple Software Vulnerabilities

Trend Micro DirectPass 1.5.0.1060 - Multiple Software Vulnerabilities Title: ====== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities Date: ===== 2013-05-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=5...

CVE-2010-5066

The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...

CoSoSys Endpoint Protector - Predictable Password Generation

source: https://www.securityfocus.com/bid/55570/info CoSoSys Endpoint Protector is prone to an insecure password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess generated passwords and gain access to affected appliances. CoSoSys Endpoint Protector 4 is...

CoSoSys Endpoint Protector - Predictable Password Generation

CoSoSys Endpoint Protector - Predictable Password Generation source: https://www.securityfocus.com/bid/55570/info CoSoSys Endpoint Protector is prone to an insecure password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess generated passwords and gain...

SDCMS 1. 1sp1 the XSS vulnerability of the mining and use-vulnerability and early warning-the black bar safety net

SDCMS 1. 1sp1XSSthe vulnerability of the mining and use of SDCMS name: era website Information Management System. SDCMS is based on ASP+ACCESS/MSSQL website Information Management System. Permanently free, open source! SDCMS to information as the theme, through text and image title as a starting...

Joomla! 1.5.x可预测密码生成和信息泄露漏洞

Bugtraq ID: 52750 Joomla!是基于php+mysql模式的快速建站系统 Joomla!存在安全漏洞，允许攻击者获得敏感信息或绕过安全限制 -密码生成算法存在错误可生成可猜测密码，通过密码重置功能可猜测生成的密码信息。 -存在一个不充分权限检查错误，可被利用获得管理员后端的部分敏感信息 0 Joomla! 1.5.x 厂商解决方案 Joomla! 1.5.26已经修复此漏洞，建议用户下载使用： http://www.joomla.org/...

Pro Clan Manager 1.4.2 SQL Injection

Pro Clan Manager, Multiple Vulnerabilities =============== Document Details =============== Version 1.0, 2011-11-19 =============== Background =============== "The aim of Pro Clan Manager is to create an international content management system dedicated to helping Clans or Guilds work together an...

Dienstplan Predictable Random Password Generation Vulnerability

Dienstplan is prone to an insecure random password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess randomly generated passwords. Versions prior to Dienstplan 2.3 are vulnerable. OpenVAS Vulnerability Test $Id: gbdienstplan49412.nasl 5747 2017-03-28...

Dienstplan Predictable Random Password Generation Vulnerability

Dienstplan is prone to an insecure random password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess randomly generated passwords. Versions prior to Dienstplan 2.3 are vulnerable. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be...