Design/Logic Flaw

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

Code injection

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value...

CVE-2007-3153

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

CVE-2007-3152

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value...

CVE-2007-3153

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

CVE-2007-3152

CVE-2007-3152 affects c-ares up to 1.4.0, where a predictable seed for the DNS Transaction ID RNG can allow remote attackers to guess IDs and spoof DNS responses. Affected: c-ares

CVE-2007-3153

The CVE-2007-3153 entry describes a vulnerability in the c-ares library: on non-Windows platforms, ares_init:randomize_key uses a weak random-number source (Unix rand), enabling attackers to spoof DNS responses by guessing values. The issue is linked to multiple advisories and updates (e.g., Fedo...

CVE-2007-3152

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value...

apache mod rewrite exploit (win32)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

CVE-2007-3153: Undefined Security Weakness

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...

CVE-2007-3152: Undefined Security Weakness

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value...

c-ares -- DNS Cache Poisoning Vulnerability

Secunia reports: The vulnerability is caused due to predictable DNS "Transaction ID" field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed...

Ares Fileshare Detection

Ares Fileshare is installed on the remote host. Ares Fileshare is a P2P application that supports connecting to several P2P networks; eg, Gnutella and OpenFT. As such, it may not be suitable for use in a business environment. In addition, note that it's not possible for Nessus to determine the...

CVE-2005-2425

CVE-2005-2425 describes a stack-based buffer overflow in Ares FileShare 1.1 . An attacker can trigger the overflow via a (1) long history parameter in the configuration file (ares.conf) or (2) a long search string, potentially allowing remote code execution or elevation of privileges for local us...

CVE-2005-2425

Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a 1 long history parameter in the configuration file ares.conf or 2 long search string...

CVE-2005-2425

Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a 1 long history parameter in the configuration file ares.conf or 2 long search string...

CVE-2005-2425: Undefined Security Weakness

Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a 1 long history parameter in the configuration file ares.conf or 2 long search string...