2809 matches found
openSUSE 10 Security Update : CASA (CASA-1849)
Various bugs and problems were fixed in the CASA authentication framework, some of them security relevant : - Secrets with special characters inside were handled incorrectly. - Enhanced Salt generation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
rpginferno-sql.txt
--==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
vBulletin Mod RPG Inferno 2.4 (inferno.php) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= vBulletin Mod RPG Inferno 2.4 inferno.php SQL Injection Vulnerability =======================================================================...
vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection
vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection --==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==--...
Low: Red Hat Security Advisory: busybox security update
Updated busybox packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Busybox is a single binary which includes versions of a large number of system commands, including a shell. This package can be...
security flaw
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables...
MyBulletinBoard (MyBB) 1.2.2 - 'CLIENT-IP' SQL Injection
!/usr/bin/perl LOGO Mybb = 4.1 wwork: blind sql-inj ggoogle: Powered By MyBB coded by Elekt antichat.ru Coments ОпиÑание: Работа ÑкÑплойта оÑнована на sql-инъекции в HTTPCLIENTIP. Ðеавторизованный пользователь может...
Unix/BSD/Linux the password mechanism of the century-vulnerability and early warning-the black bar safety net
Freebird [email protected] 1. Overview Early U N I X system to a user password stored in a plain text readable“password file”, which may be in the system administrator's attention to the case of not being intercepted and exposed. It also may have been in one accident in the leak. From AT&T UNIX...
Fedora Core 4 : busybox-1.00-5.fc4 (2006-511)
The BusyBox passwd command does not use a proper salt when generating passwords. This would create an instance where a brute-force attack could take very little time. This problem is fixed in busybox-1.00-5.fc4. Note that Tenable Network Security has extracted the preceding description block...
postgresql, rh security update
CentOS Errata and Security Advisory CESA-2006:0526 Updated postgresql packages that fix several security vulnerabilities are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PostgreSQL is an...
security flaw
The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...
DEBIAN-CVE-2006-1058
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables...
Design/Logic Flaw
The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...
CVE-2006-0591
The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...
crypt_blowfish cryptographic problem
Salt generation algorithm has high probability of salt duplication...
CVE-2006-0591: Undefined Security Weakness
The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...
CVE-2002-1975
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...
CVE-2002-1657
PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack...
CVE-2002-1657
PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack...
CVE-2002-1657
CVE-2002-1657 affects PostgreSQL where the username is used as the salt when password hashing. This design choice can lower password strength and enable remote attackers to perform brute-force password guessing more easily, potentially compromising authentication. Available connected sources conf...