Design/Logic Flaw

/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the 1 administrator and 2 operator passwords, which makes it easier for local users to obtain sensitive...

CVE-2010-4302

Cisco CVE-2010-4302 affects Cisco Unified Videoconferencing (UVC) System 5110/5115 on Linux, where /opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val uses a weak hashing algorithm for administrator and operator passwords. This weak hashing enables local users to recover cleartext passwords of adm...

Wind River Systems VxWorks weak default hashing algorithm in standard authentication API (loginLib)

Overview The hashing algorithm that is used in the standard authentication API for VxWorks is susceptible to collisions. An attacker can brute force a password by guessing a string that produces the same hash as a legitimate password. Description An attacker with a known username and access to a...

SSL Certificate Signed Using Weak Hashing Algorithm

Binary data 4804.prm...

SSL Certificate Signed Using Weak Hashing Algorithm

Binary data 4805.prm...

SSL Certificate Signed Using Weak Hashing Algorithm

Binary data 4803.prm...

SSL Certificate Signed Using Weak Hashing Algorithm

The remote service uses an SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g. MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks. An attacker can exploit this to generate another certificate with the sam...

Multiple Mozilla Firefox / Thunderbird / Seamonkey vulnerabilities

HTML filtering bypass, crossite scripting, weak hashing function, memory corruption, buffer overflow, etc...

CVE-2007-1051

Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.17.183 and earlier uses a weak cryptographic hashing function CRC32 to identify trusted modules, which allows local users to bypass security protections by substituting modified modules that have the same CRC32 value...

CVE-2007-1051

Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier is affected by a vulnerability where a weak CRC32 hashing is used to identify trusted modules, allowing local attackers to bypass protections by substituting modified modules with the same CRC32. Root cause: weak modul...

CVE-2006-4068

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...

CVE-2004-0679

The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...

CVE-2004-0679

CVE-2004-0679 concerns UnrealIRCd 3.2 (and possibly other versions) where the IP cloaking feature (cloak.c) uses a weak hashing scheme to hide IP addresses. This flaw could allow remote attackers to perform brute force attempts to reveal other users’ IP addresses. Multiple connected sources (NVD ...

CVE-2004-0679

The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...

[Full-Disclosure] Unreal ircd 3.2 clocking subsystem vulnerability

Software name: Unreal ircd Vulnerable versions: 3.2 and probably previous versions Problem nature: Information disclosure Summary: Unreal ircd is a popular irc server. One of the features it provides is called 'ip cloaking'. The purpose of this system is to prevent hostile irc users from getting...

CVE-2001-1356

Affected software: NetWin SurgeFTP 2.0f and earlier. Vulnerability: passwords are encrypted with weak hashing, a fixed salt, and modulo 40 arithmetic, enabling remote attackers to perform brute‑force password guessing against the administrator account on port 7021. Impact: attacker could compromi...

SurgeFTP admin account bruteforcable

SurgeFTP admin account bruteforcable AFFECTED SYSTEMS SurgeFTP = 2.0f on a win32 platform, should give the same results on nix DESCRIPTION SurgeFTP uses the same extremely weak hashing algorithm as the NWauth module to store the admin password, but adding a fixed 'salting' value which is "qr"...

CVE-2001-1356

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021...

Проблемы в авторизации MySQL

ИСпользуется слабый механизм хэширования при авторизации позволяющий восстановить пароль...

aimprotocol.txt

http://www.rootshell.com/ Author: [email protected] http://www.foo.org/aim/ A quick note: please, do not kick and scream if this is old news; I don't really watch these things and this is the first I've seen. AOL Instant Messenger doesn't seem to make too much a point of security. Security really isn...