272 matches found
CVE-2013-7379: Improper Authentication
The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header that partially matches config.master.api.accesskey...
PT-2014-3406
Name of the Vulnerable Software and Affected Versions tomato versions prior to 0.0.6 Description The admin API in the tomato module does not properly check the access key when it is set to a string, allowing remote attackers to bypass authentication via a string in the access-key header that...
Debian Security Advisory DSA 2389-1 (linux-2.6 - privilege escalation/denial of service/information leak)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-2183Andrea Righi reported an issue in KSM, a memory-saving de-duplication...
Ubuntu Update for nova USN-1247-1
Ubuntu Update for Linux kernel vulnerabilities USN-1247-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12471.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nova USN-1247-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
[SECURITY] [DSA 2389-1] linux-2.6 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2389-1 [email protected] http://www.debian.org/security/ Dann Frazier January 15, 2012 http://www.debian.org/security/faq -...
CVE-2011-4311
ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors...
CVE-2011-4311
CVE-2011-4311 affects ResourceSpace before 4.2.2833, where improper validation of access keys allows remote attackers to bypass intended resource restrictions via unspecified vectors. The vulnerability enables unauthorized access without specific vectors described in the provided documents. No ex...
CVE-2011-4311: Improper Input Validation
ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors...
Ubuntu 11.10 : nova vulnerability (USN-1247-1)
An information leak was discovered in Nova. An attacker with access to a valid EC2ACCESSKEY could obtain the corresponding EC2SECRETKEY for that user. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted...
CVE-2004-2732
The vulnerability CVE-2004-2732 affects nbmember.cgi in Netbilling 2.0, where a remote attacker can disclose sensitive information via the cmd=test option to determine the access key. Documents confirm the flaw is an information-disclosure issue with network access and no authentication requireme...
