Incorrect Certificate Validation in Java Secure Socket Extension

According to SUN it has been reported that: "the Java Secure Socket Extension JSSE may incorrectly validate the digital certificate of a web site. This may result in untrustworthy web sites being authenticated for SSL transactions. The Java Plug-in and Java Web Start may incorrectly validate the...

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service (2)

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service 2 // source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the...

Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (3)

source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This vulnerability was originally...

CVE-1999-1444

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...

CVE-1999-1444

CVE-1999-1444 affects the genkey utility in Alibaba 2.0, which generates RSA key pairs with an exponent of 1. The underlying issue is the weak exponent, enabling transactions to be sent in cleartext. The connected documents confirm the vulnerability scope but do not provide a published exploit, a...

CVE-1999-1444: Undefined Security Weakness

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...

Network Associates CSMAP and smap/smapd vulnerable to buffer overflow thereby allowing arbitrary command execution

Overview A remotely exploitable buffer overflow exists in the Gauntlet Firewall. Description The buffer overflow occurs in the smap/smapd and CSMAP daemons. According to PGP Security, these daemons are responsible for handling email transactions for both inbound and outbound e-mail.This...

Internet Explorer incorrectly validates certificates when CRL checking is enabled

Overview Microsoft Internet Explorer IE fails to properly validate certificates when CRL checking is enabled. As a result, sensitive information may be exposed. Description Digital certificates are small documents used to authenticate and encrypt information transmitted over the Internet. One ver...

CVE-1999-0796: Undefined Security Weakness

FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks...

CVE-1999-1444

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...

ms.outlook.DoS.txt

Date: Fri, 25 Jun 1999 13:24:02 -0700 From: YoDuh To: [email protected] Subject: Outlook denial of service I've found a problem in qualcomm popper and presumabley others in that it doesn't check for an existing X-UIDL: headers, but simpley uses it when the client sends in a uidl request. This...