PHP 7.0.x < 7.0.1 Multiple Vulnerabilities

Binary data 9064.prm...

PHP 7.0.x < 7.0.1 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.1. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the collatorsortwithsortkeys function due to improper clearing of pointers when destroying an array. An...

MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability

MariaDB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...

Oracle MySQL MariaDB - Insecure Salt Generation Security Bypass

Oracle MySQL MariaDB - Insecure Salt Generation Security Bypass source: https://www.securityfocus.com/bid/56837/info MySQL and MariaDB are prone to a security-bypass weakness. An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible. use...

Oracle MySQL / MariaDB - Insecure Salt Generation Security Bypass

source: https://www.securityfocus.com/bid/56837/info MySQL and MariaDB are prone to a security-bypass weakness. An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible. use Net::MySQL; $|=1; my $mysql = Net::MySQL-new hostname = '192.168.2.3...

openSUSE 10 Security Update : CASA (CASA-1849)

Various bugs and problems were fixed in the CASA authentication framework, some of them security relevant : - Secrets with special characters inside were handled incorrectly. - Enhanced Salt generation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

crypt_blowfish cryptographic problem

Salt generation algorithm has high probability of salt duplication...

CVE-2002-1657

CVE-2002-1657 affects PostgreSQL where the username is used as the salt when password hashing. This design choice can lower password strength and enable remote attackers to perform brute-force password guessing more easily, potentially compromising authentication. Available connected sources conf...