CVE-2005-0584

Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks...

GNU Cfengine 2.17p1 RSA Authentication Heap Overflow Exploit

Exploit for linux platform in category remote exploits ============================================================ GNU Cfengine 2.17p1 RSA Authentication Heap Overflow Exploit ============================================================ / removed line 54 /str0ke / / cfengine rsa heap remote...

CVE-2005-0486

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the...

HP-UX Security patch : PHSS_9690

The remote host is missing HP-UX Security Patch number PHSS9690 . Security vulnerability bypassing proper authentication %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17044;...

HP-UX Security patch : PHSS_9627

The remote host is missing HP-UX Security Patch number PHSS9627 . Security vulnerability bypassing proper authentication %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17049;...

HP-UX Security patch : PHSS_8665

The remote host is missing HP-UX Security Patch number PHSS8665 . Security vulnerability bypassing proper authentication %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16814;...

HP-UX Security patch : PHSS_8667

The remote host is missing HP-UX Security Patch number PHSS8667 . Security vulnerability bypassing proper authentication %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16813;...

iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability

Exim authspaserver Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0731 www.idefense.com/application/poi/display?id=178&type=vulnerabilities January 07, 2004 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...

CVE-2004-1437

Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code...

CVE-2004-0590

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS7 certificates in which a self-signed certificate identifies an alternate...

Cherokee Web Server < 0.4.17.1 auth_pam Authentication Format String

Binary data 2383.prm...

Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)

Binary data 2207.prm...

CVE-2002-1112

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page...

CVE-2003-0122

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name DN during NotesRPC authentication and an outer field length that is less than that of the DN field...

PT-2004-2549 · Ipswitch · Ws Ftp

Name of the Vulnerable Software and Affected Versions: WS FTP version 5.0.2 Description: The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, by sending a CD command with an invalid path containing a "../" sequence. Recommendations: For WS FTP...

AIX 5.2 : IY42424

The remote host is missing AIX Critical Security Patch number IY42424 SECURITY: Native GSSAPI ftpd incorrectly authenticates. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Pavuk Digest - Authentication Remote Buffer Overflow

Pavuk Digest - Authentication Remote Buffer Overflow / exploit for pavuk web spider - infamous42md AT hotpop DOT com shouts to mitakeet, skullandcircle, and thanks to matt murphy for making me realize a n00bish mistake i made. this exploit probably deserves a bit of an explanation as it was not...

Pavuk Digest - Authentication Remote Buffer Overflow

/ exploit for pavuk web spider - infamous42md AT hotpop DOT com shouts to mitakeet, skullandcircle, and thanks to matt murphy for making me realize a n00bish mistake i made. this exploit probably deserves a bit of an explanation as it was not exactly straight forward. the vulnerable code looks li...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2003:079)

A vulnerability in Konqueror was discovered where it could inadvertently send authentication credentials to websites other than the intended site in clear text via the HTTP-referer header when authentication credentials are passed as part of a URL in the form http://user:password@host/. The...

RHEL 2.1 : vnc (RHSA-2002:287)

Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...