758 matches found
DSA-273 krb4 - Cryptographic weakness
Bulletin has no description...
DEBIAN-CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...
CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...
CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...
CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...
DEBIAN-CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...
DEBIAN-CVE-2002-1755
tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC...
CVE-1999-0489
CVE-1999-0489 affects MSHTML.DLL in Internet Explorer 5.0. It allows a remote attacker to paste a file name into the file upload intrinsic control (variant of “untrusted scripted paste” per MS:MS98-013).
CVE-1999-0870
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste...
ie50.cross-frame.txt
Subject: IE 5.0 cross-frame vulnerabilities back again from: Francis Favorini Folks, It seems that after applying the IFRAME ExecCommand patch from MS9-042, IE 5.0 is again vulnerable to Georgi Guninski's cross-frame bugs. You can visit his page at to test. I tested this on 2 NTW 4.0 SP5 machines...
msie.5.0.paste.txt
Date: Wed, 24 Mar 1999 17:29:49 +0100 From: Juan Carlos Garcia Cuartango To: [email protected] Subject: Internet Explorer 5 Paste operations Greetings, I have further investigated the Clipboard Vulnerabillity in IE 5. In IE 4 scripted "paste" operations where only allowed if data...
cuartango-son.txt
The Son of Cuartango Hole http://pages.whowhere.com/computers/cuartangojc/son1.html Affected software Microsoft Internet Explorer 4.01 Fixes Microsoft has released a fix : Microsoft Security Site http://www.microsoft.com/security/bulletins/ms98-015.asp Microsoft names the vulnerability as...
CVE-1999-0489
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...