CVE-2014-9294: Undefined Security Weakness

util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

CVE-2013-4440

Password Generator aka Pwgen before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

Default credentials

Password Generator aka Pwgen before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

CVE-2013-4440

Password Generator aka Pwgen before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

CVE-2013-4440

Password Generator aka Pwgen before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

CVE-2014-9408

Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System RTLS Controller 6.0.5-FINAL, and Activator 3 uses part of the MAC address as part of the RC4 setup key, which makes it easier for remote attackers to guess the key via a brute-force attack...

CVE-2013-4440

Password Generator aka Pwgen before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

CVE-2013-4440

Pwgen (pwgen) prior to version 2.07 is affected by CVE-2013-4440, where it generates weak non-tty passwords, enabling context‑dependent attackers to guess credentials via brute force. Public advisories (Mageia MGASA-2014-0535, Mandriva MDVSA-2015:008, Fedora FEDORA-2014-16406, among others) docum...

CVE-2014-8272

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack...

CVE-2014-8272

CVE-2014-8272 affects Dell iDRAC6 (modular before 3.65; monolithic before 1.98) and iDRAC7 before 1.57.57, where IPMI 1.5 session ID values are not properly randomized or selected, enabling remote attackers to brute-force session IDs and execute arbitrary commands. The vulnerability is remote (ne...

CVE-2014-9294

util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

PT-2014-1839

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.7p230 NTP versions 4.2.6p5 and earlier Description The issue is related to a weak RNG seed used in the ntp-keygen utility, making it easier for remote attackers to defeat cryptographic protection mechanisms via a...

UBUNTU-CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

PT-2014-2794

Name of the Vulnerable Software and Affected Versions Password Generator aka Pwgen versions prior to 2.07 Description The issue allows context-dependent attackers to guess passwords via a brute-force attack because weak non-tty passwords are generated. Recommendations For versions prior to 2.07,...

CVE-2014-8272: Undefined Security Weakness

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack...

PT-2014-8996

Name of the Vulnerable Software and Affected Versions Ekahau B4 staff badge tag version 5.7 with firmware 1.4.52 Ekahau Real-Time Location System RTLS Controller version 6.0.5-FINAL Ekahau Activator version 3 Description The issue concerns the use of part of the MAC address as part of the RC4 set...

CVE-2014-6078

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack...

Design/Logic Flaw

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack...

CVE-2014-6078

IBM Security Access Manager for Mobile (8.0.x) and IBM Security Access Manager for Web (7.x/8.x) are affected by CVE-2014-6078, which enables brute-force login attempts due to no account lockout after invalid logins. The vulnerability is remote, low complexity, and does not require authentication...

PT-2014-7028

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Mobile versions 8.x before 8.0.1 IBM Security Access Manager for Web versions 7.x before 7.0.0 FP10 IBM Security Access Manager for Web versions 8.x before 8.0.1 Description The issue allows remote attackers to...