JVN#49602378 SEIL/B1 authentication issue

The PPP Access Concentrator PPPAC function within SEIL/B1 contains an issue in the CHAP and MS-CHAP-V2 authentication processes, the same challenge value is repeatedly used for each authentication attempt. Impact A third party may be able to perform replay attacks. As a result, the third party ma...

Design/Logic Flaw

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request...

CVE-2008-6910

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request...

CVE-2008-6910

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request...

openSUSE Security Update : libwsman-devel (libwsman-devel-157)

This update of openwsman fixes several security vulnerabilities found by the SuSE Security-Team : - remote buffer overflows while decoding the HTTP basic authentication header CVE-2008-2234 - a possible SSL session replay attack affecting the client depending on the configuration CVE-2008-2233...

Formshield Captcha - Older Version vulnerable to replay attacks

Replay attack on CAPTCHA Libraries Summary A CAPTCHA implementation that we tested were found to be vulnerable to replay attacks. The attack is explained in detail for Formshield – A popular DOT NET CAPTCHA implementation. NOTE: We discovered this during a Black Box engagement with one of our...

Adgregate ShopAd widget validation is vulnerable to replay attack

Adgregate is a "TechCrunch 50" startup that recently signed a distribution deal with Google/DoubleClick 1. As a service, they offer a "viral widget" intended to be hosted on untrusted third-party sites through which consumers can enter their credit card information. According to their website, th...

Replay Attack Vulnerability in Tor (Linux)

This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Tor <= 0.2.0.34 Replay Attack Vulnerability - Linux

Tor Anonymity Proxy is prone to replay attack vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor Replay Attack Vulnerability (Windows)

This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Tor Replay Attack Vulnerability - Windows

Tor Anonymity Proxy is prone to replay attack vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for openwsman SUSE-SA:2008:041

Check for the Version of openwsman OpenVAS Vulnerability Test $Id: gbsuse2008041.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for openwsman SUSE-SA:2008:041 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

SmbRelay3 NTLM Replay Attack Tool/Exploit (MS08-068)

No description provided by source. SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco Acuña atarasco at gmail.com URL: http://tarasco.org/Web/tools.html http://milw0rm.com/sploits/2008-smbrelay3.zip http://exploit-db.com/sploits/2008-smbrelay3.zip...

SmbRelay3 NTLM Replay Attack Tool/Exploit (MS08-068)

Exploit for unknown platform in category remote exploits ==================================================== SmbRelay3 NTLM Replay Attack Tool/Exploit MS08-068 ==================================================== SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco...

Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068)

SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco Acuña atarasco at gmail.com URL: http://tarasco.org/Web/tools.html https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/7125.zip 2008-smbrelay3.zip milw0rm.com 2008-11-14...

FreeBSD Security Advisory (FreeBSD-SA-06:11.ipsec.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:11.ipsec.asc ADV FreeBSD-SA-06:11.ipsec.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

Authentication flaw

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

Design/Logic Flaw

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit...