CVE-2006-4943

course/jumpto.php in Moodle before 1.6.2 does not validate the session key sesskey before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter...

CVE-2004-2681

PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session...

PKCS#1 Version 1.5 Session Key Retrieval

Binary data 1971.prm...

Dameware weak encryotion

Session key is generated from static set...

Certain implementations of SSH1 may reveal internal cryptologic state

Overview An implementation problem in at least one Secure Shell SSH product and a weakness in the PKCS11.5 public key encryption standard allows attackers to recover plaintext of messages encrypted with SSH. Description A weakness in some SSH products using the SSH1 protocol may allow an attacker...

SSH connections using RC4 and password authentication can be replayed

Overview This vulnerability may allow an attacker to replay a captured SSH1 session. Description Preconditions: Client requests RC4 and the server grants request Client uses password authentication When an SSH1 session using the RC4 cipher is established, the client and server agree upon a sessio...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

CVE-1999-0151

The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access...

CVE-1999-0151

CVE-1999-0151 corresponds to the SATAN tool vulnerability where the session key can be disclosed if the user navigates the browser to other sites, potentially enabling root access. Connected sources confirm the issue affects SATAN and describe the risk of session key disclosure leading to elevate...

CVE-1999-0151: Undefined Security Weakness

The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access...

CVE-1999-0143

Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys...

CVE-1999-0143: Undefined Security Weakness

Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys...

CVE-1999-0143

Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys...

CVE-1999-0151

The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access...

PT-1995-1006 · Satan · Satan

Name of the Vulnerable Software and Affected Versions: SATAN affected versions not specified Description: The issue allows the SATAN session key to be disclosed when the user navigates to other sites using their web browser, potentially enabling root access. Recommendations: At the moment, there ...