Security Advisory: Multiple SSH vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Multiple SSH vulnerabilities Revision 1.0 - INTERIM For public release 2001 June 27 08:00 UTC -0800 Summary Three different Cisco product lines are susceptible to multiple vulnerabilities in the Secure Shell SSH protocol. These issues are...

CVE-2001-0259

ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file...

CVE-2001-0261

Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files...

CVE-2001-0081

Technical details about CVE-2001-0081 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

Dallas Semiconductor iButton DS1991 vulnerable to dictionary attack

Overview The Dallas Semiconductor iButton DS1991 is vulnerable to a dictionary attack, allowing an intruder to recover passwords. Description The Dallas Semiconductor iButton DS1911 stores 1 kilobyte of data in 3 separate password-protected areas. It includes functionality intended to prevent...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

Solaris 2.6 - FTP Core Dump Shadow Password Recovery

Solaris 2.6 - FTP Core Dump Shadow Password Recovery source: https://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates ...

Security Bulletin MS01-019

---------------------------------------------------------------------- Title: Passwords for Compressed Folders are Recoverable Date: 28 March 2001 Software: Plus! 98 and Windows Me Impact: Data compression passwords can be recovered. Bulletin: MS01-019 Microsoft encourages customers to review the...

Проблемы в файловых системах (ufs/ext2fs data recovery)

Локальный пользователь может получить доступ к содержимому файлов, которые были удалены...

Заткнуты очередные дsрки в IE (cached content и другие)

Вохможно найти физическое расположение кэша, что позволяет запустить CHM-файлы. Кроме того, есть другие проблемы...

CVE-2001-0081

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...

CVE-2000-0981

Affected software : MySQL Database Engine. Vulnerability : uses a weak authentication method that can leak information and allow recovery of passwords. Details : The CVE-2000-0981 description states a weak authentication method that could enable a remote attacker to recover the password. Nessus w...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-1018

The CVE-2000-1018 entry concerns the shred 1.0 file wiping utility. The vulnerability is that shred does not properly open a target file for overwriting or flush its buffers, which can prevent it from fully replacing the file’s data. As a result, local users may be able to recover previously dele...

FreeBSD-SA-01:04.joe

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:04 Security Advisory FreeBSD, Inc. Topic: joe creates insecure recovery files Category: ports Module: joe Announced: 2001-01-15 Credits: Christer �berg and Patrik...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-1018

shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file...

Security Advisory: Cisco Catalyst Memory Leak Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Catalyst Memory Leak Vulnerability Revision 1.0 For Release 2000 December 6 08:00 AM US/Pacific UTC+0700 Summary A series of failed telnet authentication attempts to the switch can cause the Catalyst Switch to fail to pass traffic or accept management...

Проблемы в авторизации MySQL

ИСпользуется слабый механизм хэширования при авторизации позволяющий восстановить пароль...

QSSL QNX 4.25 A - 'crypt()' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants, crypt3 is based on a variant of the DES encryption...