USN-489-1: Linux kernel vulnerabilities

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

USN-486-1: Linux kernel vulnerabilities

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...

RHEL 5 : kernel (RHSA-2007:0376)

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0376 Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

/dev/random broken

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, 1 does not properly seed pools when there is no entropy, or 2 uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on...

Design/Logic Flaw

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, 1 does not properly seed pools when there is no entropy, or 2 uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on...

CVE-2007-2453

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, 1 does not properly seed pools when there is no entropy, or 2 uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on...

CVE-2007-2453

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, 1 does not properly seed pools when there is no entropy, or 2 uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on...

CVE-2007-2453

CVE-2007-2453 concerns the Linux kernel RNG. Affected: Linux kernel 2.6 before 2.6.20.13 and 2.6.21.x before 2.6.21.4. Root cause: the entropy pool was not properly seeded when no entropy source, and entropy was extracted using an incorrect cast, which might cause the RNG to produce identical val...

CVE-2007-2453

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, 1 does not properly seed pools when there is no entropy, or 2 uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on...

Design/Logic Flaw

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

Code injection

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value...

CVE-2007-3153

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

[USN-470-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-470-1 June 08, 2007 linux-source-2.6.20 vulnerabilities CVE-2007-1353, CVE-2007-2451, CVE-2007-2453 =========================================================== A security issue affects the following Ubuntu...

CVE-2007-2453: Undefined Security Weakness

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, 1 does not properly seed pools when there is no entropy, or 2 uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on...

CVE-2007-3153: Undefined Security Weakness

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

USN-470-1: Linux kernel vulnerabilities

USN-464-1 fixed several vulnerabilities in the Linux kernel. Some additional code changes were accidentally included in the Feisty update which caused trouble for some people who were not using UUID-based filesystem mounts. These changes have been reverted. We apologize for the inconvenience. For...

PT-2007-4043 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 4.4.7 PHP versions 5.0.x and earlier PHP versions prior to 5.2.1 Description: The issue affects the encryption process, making it easier for attackers to decrypt certain data due to guessable encryption keys. This is...

Mozilla Foundation Security Advisory 2007-05

Mozilla Foundation Security Advisory 2007-05 Title: XSS and local file access by opening blocked popups Impact: Moderate Announced: February 23, 2007 Reporter: shutdown, Michal Zalewski Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.0.8 Description shutdown...

Multiple security vulnerabilities in Bluetooth protocol and Bluetooth stacks implementations

Buffer overflows, weak authentication algorithm, weak pseudo-random number generators, directory traversals, etc...