[SECURITY] [DSA 734-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 734-1 [email protected] http://www.debian.org/security/ Martin Schulze July 5th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 726-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...

CVE-2002-1656

CVE-2002-1656 affects X-News (x_news) 1.1 and earlier, a PHP-based news management system that stores user IDs and MD5 password hashes in a world-readable file (db/users.txt). The vulnerability enables an attacker to authenticate as other users by obtaining a password hash (e.g., via sniffing or ...

CVE-2002-1656

X-News xnews 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie...

CVE-2002-1656: Undefined Security Weakness

X-News xnews 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie...

Microsoft Windows XP2003 - Remote Denial of Service

Microsoft Windows XP2003 - Remote Denial of Service / Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include include include include include include include include include include include / Windows Server 2003 and XP SP2 remote DoS exploit Tested under OpenBSD 3.6 at WinXP SP 2 Vuln by...

CitrusDB Static id_hash Admin Authentication Bypass

The remote host is running CitrusDB, an open source customer database application written in PHP. The version of CitrusDB installed on the remote host uses as an authentication cookie the MD5 checksum of a username followed by the constant 'boogaadeeboo'. Knowing a valid username on the remote...

remote DoS for Nasi

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: All version = Network Assistant 3.2 build 2260 Bug found by: : Гринвуд Date: 6.01.2005 Influence: DoS URL: www.gracebyte.com Если...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

CVE-2002-0703

CVE-2002-0703 involves the perl-Digest-MD5 module and its interaction with Perl that can yield incorrect MD5 checksums for UTF-8 data, impairing data integrity verification. Mandrake’s MDKSA-2002:035 notes a UTF-8 handling bug in perl-Digest-MD5 and states that version 2.20 fixes the problem. The...

ipfilter DoS

TCP/ACK packet with invalid checksum causes connection to be treated as established...

Filtering devices spotting

SECURITY ALERT Systems Affected 100 of packet filtering systems included commercial embedded devices no unaffected system known at the moment Risk low Overview Multiple vendors' implementations of a packet filtering engine doesn't check the level 4 checksum. This could be used by an attacker to...

Transport level checksum firewall detection attack

By sendgin packets with invfalid level 4 transport chacksum it's possible to detect packet filters...

CVE-2002-1656

X-News xnews 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie...

CVE-2002-0863

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

vulnerabilities in logsurfer

-----BEGIN PGP SIGNED MESSAGE----- The program "logsurfer" was designed to monitor any text-based logfiles on systems in realtime. For more informations about logsurfer we refer to http://www.cert.dfn.de/eng/logsurf/home.html 1. Affected software: All logsurfer versions including 1.5a and earlier...

Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities

Vulnerable All versions of Microsoft Windows using encrypted RDP are vulnerable to the checksum vulnerability. The following versions are also vulnerable to the keystroke vulnerability: Microsoft Windows XP Professional Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsof...

CVE-2002-0703

An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...

CVE-2002-0286

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to adduser.php, which causes GetPassword to produce and compare a blank password for the...

CVE-1999-1085

The CVE-1999-1085 issue affects SSH1 protocol implementations (notably OpenSSH and SSH1-supporting SSH stacks) in CBC or CFB mode. A CRC-32 checksum weakness enables a known-plaintext attack to insert arbitrary data into an existing SSH stream between client and server, potentially allowing an at...