Fedora Core 3 : ruby-1.8.1-7.FC3.1 (2004-403)

Thu Nov 11 2004 Akira TAGOH - 1.8.1-7.FC3.1 - security fix CVE-2004-0983 - security fix CVE-2004-0755 - ruby-1.8.1-cgi-dos.patch: applied to fix a denial of service issue. 138366 - ruby-1.8.1-cgisessionperms.patch: sets the permission of the session data file to 0600. 130063 - Sat Oct 30 2004...

silc question - insecure memory

Good Evening, while screwing around tonight checking memory for the SSH2 advisory. I noticed passphrase and complete sessions from silc in memory. I dont know if this is normal for silc I wouldnt think it would be but all you need to do it is: cdowns@Vader:$ sudo dd if=/dev/mem...

CVE-2002-1746

Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets...

CVE-2002-0863

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

CVE-2002-0863

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

EUVD-2002-0855

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

Microsoft Internet Explorer vulnerable to DoS via crafted ftp:// URL

Overview Microsoft Internet Explorer has a vulnerability that may cause the program to crash when opening some FTP URL's. Description Microsoft Internet Explorer with Browsing Enhancements installed by default on some versions of Windows may crash when opening an FTP URL containing '' or '&'...

Memory leak in WinSSH

Session data is not released after session is over...

RealServer 5.0/6.0/7.0 - Memory Contents Disclosure

source : https://www.securityfocus.com/bid/1957/info RealServer is a popular streaming audio and video server from Real Networks. A vulnerability exists in all versions of RealServer 7 and below that could allow a remote attacker to gain administrative rights and access to server information and...