4741 matches found
Moderate: Red Hat Security Advisory: apache, mod_ssl security update for Stronghold
Updated versions of cross-platform Stronghold that fix security issues in modssl and the Apache HTTP Server are now available. Stronghold 4 contains a number of open source technologies, including modssl and the Apache HTTP Server. A buffer overflow in the gettag function in modinclude for Apache...
Moderate: Red Hat Security Advisory: apache, mod_ssl security update
Updated apache and modssl packages that fix various minor security issues and bugs in the Apache Web server are now available for Red Hat Enterprise Linux 2.1. The Apache HTTP Server is a powerful, full-featured, efficient, and freely-available Web server. The modssl module provides strong...
CVE-2004-0163
Sygate Secure Enterprise SSE 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service resource exhaustion by capturing a session and repeatedly replaying the session...
Netdynamics ndcgi.exe Previous User Session Replay
Binary data 1712.prm...
CVE-2004-0163
Sygate Secure Enterprise SSE 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service resource exhaustion by capturing a session and repeatedly replaying the session...
Corsaire Security Advisory - Sygate Secure Enterprise replay issue
-- Corsaire Security Advisory -- Title: Sygate Secure Enterprise replay issue Date: 20.11.03 Application: Sygate Secure Enterprise prior to 3.5MR3 Environment: Windows NT, 2000, 2003 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c031120-002 -- Scope --...
Sygate Secure Enterprise replay attacks
Weak cryptography in communications between server and client doesn't protect against replay attacks...
RHEL 2.1 : vnc (RHSA-2002:287)
Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...
[Full-Disclosure] Ph0rum phorum_uriauth replay attack
Arhont Ltd.- Information Security Arhont Advisory by: Konstantin Gavrilenko http://www.arhont.com Advisory: Ph0rum phorumuriauth replay attack Class: design bug ? Version: 4.3.7 Model Specific: Other version might have the same bug Contact Date: 11/05/2004 email sent to [email protected] PD releas...
CVE-2004-1082
moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...
Apache Httpd < 1.3.31 : mod_digest nonce checking
moddigest does not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a malicious user who is able to sniff network traffic to conduct a replay attack against a website using Digest protection. Note that moddigest implements an older version of the MD5...
Weaknesses in MIT magic cookie and XDM X Windows authorization
Overview MIT magic cookie and XDM authorization contain vulnerabilities that could allow remote attackers to connect to X displays. Description Two widely used X Window System authorization schemes have weaknesses in their sample implementations. MIT-MAGIC-COOKIE-1 On some systems built without t...
Kerio Personal Firewall vulnerable to replay attack
Overview Kerio Personal Firewall contains a vulnerability that may allow a remote attacker to replay an administration session. Description Kerio Technologies Inc. describes the Kerio Personal Firewall as follows:Kerio Personal Firewall KPF is a software agent that builds a barrier between your...
Kerio personal firewall multiple bugs
It's possible to fool ip filtering by using UDP/53 as a source port. Buffer overflow during authentication. Replay attacks during authentication...
CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall
Core Security Technologies Advisory http://www.coresecurity.com Vulnerabilities in Kerio Personal Firewall Date Published: 2003-04-28 Last Update: 2003-04-28 Advisory ID: CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Name: None currently assigned Title: Kerio Personal Firewall Replay Attack and...
Moderate: Red Hat Security Advisory: : : : Updated VNC packages fix replay and cookie vulnerabilities
Updated VNC packages are available, fixing a challenge replay and a weak cookie vulnerability. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. VNC is a tool for providing a remote graphical user interface. Two vulnerabilities have been found in versions o...
Moderate: Red Hat Security Advisory: vnc security update
Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...
DEBIAN-CVE-2002-1746
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets...