2889 matches found
Hardcoded credentials
The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to 1 execute arbitrary Java code, or 2 gain access to machines connected to...
CVE-2009-1472
The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to 1 execute arbitrary Java code, or 2 gain access to machines connected to...
Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1
Ubuntu Update for Linux kernel vulnerabilities USN-470-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4701.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
OpenSSH CBC模式信息泄露漏洞
BUGTRAQ ID: 32319 OpenSSH是一种开放源码的SSH协议的实现，初始版本用于OpenBSD平台，现在已经被移植到多种Unix/Linux类操作系统下。 如果配置为CBC模式的话，OpenSSH没有正确地处理分组密码算法加密的SSH会话中所出现的错误，导致可能泄露密文中任意块最多32位纯文本。在以标准配置使用OpenSSH时，攻击者恢复32位纯文本的成功概率为2^-18，此外另一种攻击变种恢复14位纯文本的成功概率为2^-14。 OpenSSH OpenSSH 4.7p1 SSH Communications Security Tectia Server 6.x SSH...
CVE-2008-5161
Error handling in the SSH protocol in 1 SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1;...
FreeBSD Security Advisory (FreeBSD-SA-05:19.ipsec.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:19.ipsec.asc ADV FreeBSD-SA-05:19.ipsec.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...
FreeBSD Security Advisory (FreeBSD-SA-05:19.ipsec.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:19.ipsec.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
BlogMe PHP 1.1 - comments.php SQL Injection
BlogMe PHP 1.1 - comments.php SQL Injection + BlogMe PHP remote SQL injection exploit + Script download : http://www.drumster.net/gamma/downloads/BlogMe11.zip + Founded by : His0k4 ALGERIAN HaCkEr + Greetz : All friends & muslims HaCkeRs... + Dork : "BlogMe PHP created by Gamma Scripts" + Exploit...
Debian Security Advisory DSA 1449-1 (loop-aes-utils)
The remote host is missing an update to loop-aes-utils announced via advisory DSA 1449-1. OpenVAS Vulnerability Test $Id: deb14491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1449-1 loop-aes-utils Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
Debian Security Advisory DSA 825-1 (loop-aes-utils)
The remote host is missing an update to loop-aes-utils announced via advisory DSA 825-1. David Watson discoverd a bug in mount as provided by util-linux and other packages such as loop-aes-utils that allows local users to bypass filesystem access restrictions by re-mounting it read-only. The old...
Debian: Security Advisory (DSA-825-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1449-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1449-1 : loop-aes-utils - programming error
It was discovered that loop-aes-utils, tools for mounting and manipulating filesystems, didn't drop privileged user and group permissions in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges. %NASLMINLEVEL 70300 C Tenable...
[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1449-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...
loop-aes-utils / util-linux privilege escalation
Group privileges are not properly dropped...
[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
------------------------------------------------------------------------ Debian Security Advisory DSA-1449-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...
DSA-1449-1 loop-aes-utils privilege escalation
Bulletin has no description...
Ubuntu 7.04 : linux-source-2.6.20 vulnerabilities (USN-470-1)
USN-464-1 fixed several vulnerabilities in the Linux kernel. Some additional code changes were accidentally included in the Feisty update which caused trouble for some people who were not using UUID-based filesystem mounts. These changes have been reverted. We apologize for the inconvenience. For...
Fedora 7 : xpdf-3.02-1.fc7 (2007-1383)
Changes since 3.01: Added anti-aliasing for vector graphics; added the vectorAntialias xpdfrc option; added the '-aaVector' switch to xpdf and pdftoppm. Implemented stroke adjustment always enabled by default, ignoring the SA parameter, to match Adobe's behavior, and added the strokeAdjust xpdfrc...