5565 matches found
Perl2Exe 1.0 95.0 26.0 - Code Obfuscation
Perl2Exe 1.0 95.0 26.0 - Code Obfuscation source: https://www.securityfocus.com/bid/6909/info Perl2Exe obfuscates Perl source code using a reversible algorithm when converting it to an executable format. This occurs when the "encrypt" option is selected. Those who use Perl2Exe with the expectatio...
Perl2Exe 1.0 9/5.0 2/6.0 - Code Obfuscation
source: https://www.securityfocus.com/bid/6909/info Perl2Exe obfuscates Perl source code using a reversible algorithm when converting it to an executable format. This occurs when the "encrypt" option is selected. Those who use Perl2Exe with the expectation that the source code will be concealed...
OpenSSH & S/Key information leakage
FIRST: Neither of these information leakage issues is a security bug in itself. Both S/Key and OpenSSH are secure even with this issue. However, this information leakage may assist a hostile attacker. General S/Key Information Leakage: As is commonly known, the S/Key and OPIE one-time password...
EFTP Version 2.0.7.337 vulnerabilities
EFTP Version 2.0.7.337 vulnerabilities According to their site @ www.eftp.org "EFTP is a 32bit combined Client/Server application, basically 2 programs in one. EFTP incorporates the 448bit Blowfish Encryption Algorithm and the FTP protocol RFC 959 implementation to provide secure file transfers...
Starfish Truesync Desktop + REX 5000 Pro multiple vulnerabilities
Background: REX 5000 is a credit card sized PDA, made by Xircom which now is "An Intel Company". It is coming with a good PIM program, Starfish www.starfish.com Truesync Desktop which is probably a new rewrite of the well-known Starfish Sidekick. I just downloaded the last version, 2.0b. I notice...
SurgeFTP admin account bruteforcable
SurgeFTP admin account bruteforcable AFFECTED SYSTEMS SurgeFTP = 2.0f on a win32 platform, should give the same results on nix DESCRIPTION SurgeFTP uses the same extremely weak hashing algorithm as the NWauth module to store the admin password, but adding a fixed 'salting' value which is "qr"...
NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows
NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows AFFECTED SYSTEMS NWAuth module as used by DMail, SurgeFTP, others... cfr www.netwinsite.com I've tested SurgeFTP in particular The source code for NWAuth 2.0 can be found at...
Слабое шифрование в ArGoSoft FTP Server (weak encryption)
Используется обратимый алгоритм ширования...
FreeBSD-SA-01:39.tcp-isn
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:39 Security Advisory FreeBSD, Inc. Topic: TCP initial sequence number generation contains statistical vulnerability Category: core Module: kernel Announced: 2001-05-02...
Слабое шифрование в CCC Harvest (weak encryption)
Используется алгоритм подстановки цезаря...
Уязвимость в алгоритме импорта токенов
Генерация токенов легко восстанаваливается по файлу импорта закрытого ключа .asc...
Sample SecurID Token Emulator with Token Secret Import
Sample SecurID Token Emulator with Token Secret Import We have performed some cryptoanalysis and let's just say we do have grounds to believe that this algorithm is easily breakable. Once again, security of the cipher should be based entirely on the secrecy of the key, not the algorithm. Least...
Проблемы в SmartServer
Переполнение буфера в командах SMTP и POP3, кроме того, для для хранения паролей используется тривиальный обратимый алгоритм...
Weak CRC allows RC4 encrypted SSH1 packets to be modified without notice
Overview There is an information integrity vulnerability in the SSH1 protocol that allows RC4 encrypted packets to be modified without notice. Description Preconditions: Client has requested RC4 and server supports it. Compression is disabled. When using the RC4 stream cipher, SSH1 uses a cyclic...
Уязвимость в ActiveCard
PIN-код генерируется по время-зависимому алгоритму, что позволяет предсказать значительную часть цифрового кода...
sawmill5.0.21 old path bug & weak hash algorithm
Aleph1, Greetings, I did not see this in the archives so I figured I would forward it on. Vendor: Notified. Link: http://www.flowerfire.com/sawmill SawMill is a site log statistics package for UNIX, Windows and MacOS. I have been evaluating it under Linux. In my test configuration I have sawmill...
Скомпромитирован crypt() в QNX
Для шифрования пароля используется обратимый алгоритм битового вращения, который позволяет восстановить исходный текстовй пароль...
Microsoft FrontPage 98 Server Extensions for IIS / Microsoft InterDev 1.0 - Filename Obfuscation
source: https://www.securityfocus.com/bid/1108/info Two dlls dvwssr.dll and mtd2lv.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack include an obfuscation string that manipulates the name of requested files. Knowing this string and the obfuscation...
FTPx FTP Explorer 1.0.00.10 - Weak Password Encryption
// source: https://www.securityfocus.com/bid/1003/info FTP Explorer includes the option to store profiles of visited FTP sites. The user's name and password can also be stored. These stored values are kept in the registry, under the key HKCU\Software\FTP Explorer\Profiles\ProfileName\ . The...
