FreeBSD-SA-06:11.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:11.ipsec Security Advisory The FreeBSD Project Topic: IPsec replay attack vulnerability Category: core Module: sysnetipsec Announced: 2006-03-22 Credits: Pawel...

FreeBSD Security Advisory FreeBSD-SA-06:11.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:11.ipsec Security Advisory The FreeBSD Project Topic: IPsec replay attack vulnerability Category: core Module: sysnetipsec Announced: 2006-03-22 Credits: Pawel...

Sony Instant Video Everywhere replay attacl cryptography problem

Password is encrypted without using challenge. It makes it possible to replay authentication again...

CVE-2005-4437: Undefined Security Weakness

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2005-2403

The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username...

CVE-2002-2046: Undefined Security Weakness

xnews.php in X-News xnews 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5password cookie...

CVE-2005-1664: Undefined Security Weakness

The VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to 1 apply a ViewState generated from one view to a different view, 2 reuse ViewState information after the application's state has changed, or 3 use the ViewState to conduct attacks or expose...

CVE-2005-1556: Undefined Security Weakness

Gamespy cd-key validation system allows remote attackers to cause a denial of service cd-key already in use by capturing and replaying a cd-key authorization session...

Digital Video Surveillance System weak authentication

Authentication mechanism is vulnerable to man-in-the-midle attack replay attack and cleartext recovery...

ASP.NET __VIEWSTATE function replay attack

Data is stored signed on client side, but host name and timestamp are not part of signed data...

CVE-2005-0383

Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key VK is generated...

CVE-2001-1473: Undefined Security Weakness

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows th...

CVE-2004-1088: Undefined Security Weakness

Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information...

CVE-2005-0744: Undefined Security Weakness

The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by 1 sniffing the connection on TCP port 51100 and replaying the authentication information or 2 obtaining and replaying the PCZQX02 authentication cookie from the browser...

CVE-2005-0383

CVE-2005-0383 concerns Trend Micro Control Manager 3.0 Enterprise Edition, where remote attackers can escalate privileges through a replay attack of the encrypted username and password. The available documents confirm the affected product and the underlying issue (replay of credentials) but do no...

CVE-2005-0383: Undefined Security Weakness

Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...

Moderate: Red Hat Security Advisory: apache, mod_ssl security update for Stronghold

Updated versions of cross-platform Stronghold that fix security issues in modssl and the Apache HTTP Server are now available. Stronghold 4 contains a number of open source technologies, including modssl and the Apache HTTP Server. A buffer overflow in the gettag function in modinclude for Apache...

Moderate: Red Hat Security Advisory: apache, mod_ssl security update

Updated apache and modssl packages that fix various minor security issues and bugs in the Apache Web server are now available for Red Hat Enterprise Linux 2.1. The Apache HTTP Server is a powerful, full-featured, efficient, and freely-available Web server. The modssl module provides strong...

RHEL 2.1 : vnc (RHSA-2002:287)

Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...