Steam Patched Broken Crypto in Wake of Replay, Padding Oracle Attacks

The digital gaming platform Steam was quick to patch a cryptographic issue in its client recently that could have allowed an attacker to read sensitive information sent over its network, take over an account, or view plain-text passwords. Valve, the Bellevue, Wash.-based video game developer that...

Fedora 23 : python-tgcaptcha2-0.3.1-1.fc23 (2016-d7dafbf27f)

Implemented nonces to prevent replay attack DWF-2016-89000. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Midea's M-Smart smart socket has design logic flaws

M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...

Uber: Uber password reset link EMAIL FLOOD

Step to reproduce Uber password reset link EMAIL FLOOD POC Video https://youtu.be/PPJkOEo6Mw 1. Used OWSAP ZAP Proxy 2. Generated the forgotten password Link of my account [email protected] 3. Used ZAP to replay the packet 4. The Number of replay resulting into number of password link email...

HackerOne: Hogging up all the resources on hackerone.com

Please note. I believe that some of the issues described below can also be used on their own and/or combined in other configurations to achieve different results, e.g. "paying" a bounty of zero or team avoiding to resolve and unpleasant issue. I am however describing the very likely doomsday...

NTP Security Bypass Vulnerability

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker can exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack or replay attack...

VMWare Zimbra Mailer Release 8.6.0.GA Replay Attack

Hi@all, VMWare Zimbra Mailer Release 8.6.0.GA, latest patch and prior versions with DKIM implementation are vulnerable to longterm Mail Replay attacks. If the expiration header is not set, the signature never expires. This means, that the e-mail, perhaps catched while performing a man in the midd...

FreeBSD : ntp -- multiple vulnerabilities (5237f5d7-c020-11e5-b397-d050996490d0)

Network Time Foundation reports : NTF's NTP Project has been notified of the following low- and medium-severity vulnerabilities that are fixed in ntp-4.2.8p6, released on Tuesday, 19 January 2016 : - Bug 2948 / CVE-2015-8158: Potential Infinite Loop in ntpq. Reported by Cisco ASIG. - Bug 2945 /...

Network Time Protocol Deja Vu: Broadcast Mode Replay Vulnerability

Summary Expected Behavior: RFC 5905 page 29 Section 8 states that the on-wire protocol resists replay of server response packet in broadcast mode. Also on page 55 section 15, the RFC claims security in authenticated mode against on-path attackers where an attacker can: a Intercept and archive...

Swift3 Replay Attack Vulnerability

OpenStack is a cloud platform management project.Swift is one of the storage projects for storing permanent static data.Swift3 is a middleware that provides access to OpenStack Swift through the Amazon S3 API. Swift3 has a security vulnerability that allows a remote attacker to perform a replay...

CVE-2015-8466

Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header...

Authorization

Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header...

UBUNTU-CVE-2015-8466

Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header...

CVE-2015-8466

Removed by vendor...

CVE-2015-8331

CVE-2015-8331 affects Huawei VCN500’s OMU prior to V100R002C00SPC200, where the session ID is not properly invalidated after an abnormal exit. This allows remote attackers to perform replay attacks by resubmitting a valid session identifier. Impact is described as unauthorized access via the repl...

Security Advisory - Replay Attack Vulnerability of Users Abnormal Exit in VCN500

The operation and maintenance unit OMU of Huawei VCN500 Video Cloud Node does not process users’ abnormal exit properly in a specific scenario, which leaves the user’s session ID still valid. An attacker may exploit this vulnerability to launch replay attacks. Vulnerability ID: HWPSIRT-2015-07042...

IBM OpenAFS Information Disclosure Vulnerability (CNVD-2015-07373)

IBM OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. An information disclosure vulnerability exists in IBM OpenAFS, which allows a remote attacker to obtain the plaintext portion of an encrypted packet by performing a replay...

IBM OpenAFS Information Disclosure Vulnerability (CNVD-2015-07372)

IBM OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. An information disclosure vulnerability exists in IBM OpenAFS, which allows a remote attacker to perform a replay attack on the original recipient and view the ACK response...

CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

DEBIAN-CVE-2015-7762

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...