GNU Classpath 0.97.2 - 'gnu.java.security.util.PRNG' Class Entropy (2)

source: https://www.securityfocus.com/bid/32909/info GNU Classpath is prone to a weakness that may result in weaker cryptographic security because its psuedo-random number generator PRNG lacks entropy. Attackers may leverage this issue to obtain sensitive information that can lead to further...

GNU Classpath 0.97.2 - 'gnu.java.security.util.PRNG' Class Entropy (1)

source: https://www.securityfocus.com/bid/32909/info GNU Classpath is prone to a weakness that may result in weaker cryptographic security because its psuedo-random number generator PRNG lacks entropy. Attackers may leverage this issue to obtain sensitive information that can lead to further...

Authenticating security providers fails due to ClassLoader bugs

If the Trusted Application feature is not working and the following is seen noformat WARN atlassian.seraph.filter.TrustedApplicationsFilter Failed to login trusted application: confluence1234567 due to: com.atlassian.security.auth.trustedapps.InvalidCertificateException:...

SQLiteWebAdmin 0.1 (tpl.inc.php) Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= SQLiteWebAdmin 0.1 tpl.inc.php Remote Include Vulnerability ============================================================= SQLiteWebAdmin...

CVE-2002-1601

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page...

CVE-2000-1202

The CVE-2000-1202 entry affects IBMHSSSB 1.0 (ikeyman). The issue arises when ikeyman sets the CLASSPATH to include the user’s CLASSPATH before system dirs, enabling a local attacker to run arbitrary code as root via a Trojan horse Ikeyman class. The NVD entry lists a high severity (CVSSv2 7.2; L...