rightfax.txt

LoWNOISE Colombia 2000 +---RightFax Web Client v5.2: Hijack user's sessions +---Description Using your web browser When you click to log on to the rightfax server, it opens a new window. In that window you are asked for a username and password. The Toolbar on the browser is hidden, but if you ope...

CVE-2000-0111

The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions...

CVE-1999-0699

The CVE-1999-0699 instance concerns the Bluestone Sapphire web server, where session hijacking is possible through easily guessable session IDs. The connected Red Hat advisory reiterates the same description without adding new technical specifics (e.g., affected version ranges, exact session-id g...

CVE-1999-0699

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

CVE-1999-1150

Livingston Portmaster routers running ComOS use the same initial sequence number ISN for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions...

PT-2014-9091

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8za OpenSSL versions prior to 1.0.0m OpenSSL versions prior to 1.0.1h Description The issue exists due to incorrect restriction of ChangeCipherSpec message processing in OpenSSL, allowing a man-in-the-middle...