1877 matches found
CVE-2015-7763: Exposure of Sensitive Information to an Unauthorized Actor
rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...
CVE-2015-7762: Exposure of Sensitive Information to an Unauthorized Actor
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...
PT-2015-7593
Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.15 OpenAFS versions 1.7.x prior to 1.7.33 Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network due to improper initialization of the...
PT-2015-7594
Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.5.75 through 1.5.78 OpenAFS versions 1.6.x before 1.6.15 OpenAFS versions 1.7.x before 1.7.33 Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the networ...
PT-2015-2296
Name of the Vulnerable Software and Affected Versions Heimdal versions prior to 10.11 Description The issue is related to inadequate access control in the Heimdal component of the Mac OS X operating system. It allows a remote attacker to conduct replay attacks against the SMB server by exploiting...
CVE-2015-5913: Improper Access Control
Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...
Amazon Linux: Security Advisory (ALAS-2014-425)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
python-oauth2: _check_signature() ignores the nonce value when validating signed urls
It was found that python-oauth2 did not properly verify the nonce of a signed URL. An attacker able to capture network traffic of a website using OAuth2 authentication could use this flaw to conduct replay attacks against that website...
python-oauth2: Uses poor PRNG in nonce
It was found that python-oauth2 did not properly generate random values for use in nonces. An attacker able to capture network traffic of a website using OAuth2 authentication could use this flaw to conduct replay attacks against that website...
VPN daemon written in Go: GoVPN
GoVPN is simple secure virtual private network daemon. It uses Diffie-Hellman Encrypted Key Exchange DH-EKE for mutual zero-knowledge peers authentication and authenticated encrypted data transport. It is written entirely in Go programming language . All packets captured on a network interface ar...
CVE-2013-2810
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...
CVE-2013-2810
CVE-2013-2810 affects Emerson Process Management ROC800 RTU family (ROC800/ROC800L/DL8000) with affected software versions (ROC800 3.50 and earlier, DL8000 2.30 and earlier, ROC800L 1.20 and earlier). The vulnerability is a remote command execution via a TCP replay attack, i.e., authentication by...
CVE-2013-2810
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...
PT-2014-2633
Name of the Vulnerable Software and Affected Versions Emerson Process Management ROC800 RTU versions 3.50 and earlier Emerson Process Management DL8000 RTU versions 2.30 and earlier Emerson Process Management ROC800L RTU versions 1.20 and earlier Description The issue allows remote attackers to...
CVE-2013-2810: Improper Neutralization of Special Elements used in a Command
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...
CA20141103-01: Security Notice for CA Cloud Service Management
-----BEGIN PGP SIGNED MESSAGE----- CA20141103-01: Security Notice for CA Cloud Service Management Issued: November 3, 2014 CA Technologies Support is alerting customers to four resolved vulnerabilities with CA Cloud Service Management. Four vulnerabilities existed that could potentially allow a...
CVE-2014-8471: Undefined Security Weakness
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors...
zeromq: Man-in-the-middle downgrade and replay attack
CVE-2014-7202 downgrade attack A bug in streamengine.cpp allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. - CVE-2014-7203 replay attack libzmq did not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks...
