OpenSSL PRNG contains design flaw that allows a user to determine internal state and predict future output

Overview The pseudorandom number generator PRNG in OpenSSL has a weakness that allows an attacker to determine its internal state and subsequently determine its future output values. Description OpenSSL's PRNG hashes an internal state to produce output values, which are supposed to be pseudorando...

6Tunnel 0.60.70.8 - Connection Close State Denial of Service

6Tunnel 0.60.70.8 - Connection Close State Denial of Service // source: https://www.securityfocus.com/bid/3467/info 6tunnel is a freely available, open source software package designed to provide IPv6 functionality to hosts that do not comply with the standard. It works by creating IPv6 tunnels. ...

Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests.

Overview Cayman gateways vulnerable to a denial of service via oversized ICMP echo ping requests. Installing the newest version of the vendor software will resolve this vulnerability. Description Cayman gateways running versions 5.5 Build R0, 5.3 Build R2, 5.3 Build R1 are vulnerable to an...

PT-2001-1056 · Mit · Krb5-Configs +5

Name of the Vulnerable Software and Affected Versions: krb5-workstation versions 1.1.1 through 1.2.2 krb5-configs version 1.1.1 krb5-devel versions 1.1.1 through 1.2.2 krb5-server versions 1.1.1 through 1.2.2 krb5-libs version 1.1.1 krb5 version 1.1.1 through 1.2.2 Description: The issue affects...

NewsDaemon does not adequately filter user input to $user_username

Overview NewsDaemon prior to version 0.21b contains a vulnerability allowing remote attackers to gain administrative access to the web site. Description NewsDaemon is a PHP-based tool used to allow readers to submit and comments on news items and stories over the web. It also allows for...

CHINANSL Security Advisory(CSA-200106)

Topic: JavaServer Web Dev KitJSWDK1.0.1 for win2000 Directory traversal Vulnerability vulnerable: Microsoft Win2000 ЎЎЎЎ+JSWDK1.0.1 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have JSWDK 1.0.1 installed.The vulnerabili...

FreeBSD-SA-00:81.ethereal

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:81 Security Advisory FreeBSD, Inc. Topic: ethereal allows remote code execution Category: ports Module: ethereal Announced: 2000-12-20 Credits: [email protected] Affects:...

sysback makes call to hostname without a fully qualified path specification

Overview sysback , shipped with AIX systems, allows local users to gain root access because of a failure to use a fully qualified path for a call to hostname. Description sysback includes a call to hostname but does not include a full path specification. Because sysback is set uid root, intruders...

Netauth: Web Based Email Management System

This is just a quick note of a simple hole in the Netauth system. What is Netauth? Netauth is a web based eMail management system for Windows NT and most Unix platforms. What is the hole? The nethauth.cgi file http://server/cgi-bin/netauth.cgi?cmd=show&page=../../../../../../../../.. /etc/passwd...

RealServer Malformed viewsource Directory Request DoS

The version of RealServer running on the remote host has a denial of service vulnerability. It was possible to crash the remote host by sending a malformed HTTP request for a page in the viewsource directory. %NASLMINLEVEL 70300 This script was written by John Lampe [email protected] See the...

ITHouse Mail Server v1.04 To: Field Handling Overflow

The remote SMTP server is ITHouse Mail Server. Versions 1.04 or earlier of this server are vulnerable to a buffer overrun which happens during the delivery routine of the mails if an attacker has sent a message with a too long 'To:' field. An attacker may use this flaw to execute arbitrary code o...

[SECURITY] New version of splitvt released

Package: splitvt Vulnerability: local root exploit Debian-specific: no The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a local buffer overflow. This could be exploited to give a shell runni...

Security Advisory 2000-006

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...

lynx.2.8.2.extern.txt

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: lynx-2.8.2 and older Date: Thu Sep 16 21:29:15 CEST 1999 Affected: all Linux distributions using lynx-2.8.2 and older A security hole was discovered in the package mentioned above. Please update as soon as possible or disable...

Real Video Server Telnet Malformed Data Remote DoS

It was possible to crash the remote Progressive Networks Real Video Server by sending it specially crafted data. An attacker may use this flaw to prevent you from sharing sound and video. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10183; scriptversion "1.26";...

PT-1999-1084 · Openssh · Ssh

Name of the Vulnerable Software and Affected Versions: SSH versions 1.2.27 and 2.0.11 Description: The issue allows users with expired accounts to login in certain instances of SSH on Linux systems. Recommendations: For SSH version 1.2.27, update to a version that addresses the issue of allowing...

PT-1999-1794 · Ncftp · Ncftpd

Name of the Vulnerable Software and Affected Versions: NcFTPd versions prior to 2.4.1 Description: The issue is caused by an off-by-one error in the NcFTPd FTP server, allowing a remote attacker to cause a denial of service crash via a long PORT command. Recommendations: For versions prior to...

PT-1998-1035 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 9.x through 11.x Description: The issue allows attackers to crash a Cisco IOS router or device if they can access an interactive prompt, such as a login. Recommendations: For versions 9.x through 11.x, update to a version...

FreeBSD-SA-96:09.vfsload

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:09 Security Advisory Revised: Wed May 22 00:20:09 PDT 1996 FreeBSD, Inc. Topic: unauthorized access via mountunion / mountmsdos vfsload Category: core Module: libc...

FreeBSD-SA-96:02.apache

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:02 Security Advisory FreeBSD, Inc. Topic: apache httpd meta-character escaping Category: port Module: apache Announced: 1996-04-22 Affects: FreeBSD 2.0.5 and 2.1.0...