Lucene search
+L

9 matches found

BDU FSTEC
BDU FSTEC
•added 2015/04/29 12:00 a.m.•16 views

Cisco Nexus 7000 Bypass Security

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...

7.3CVSS7.2AI score0.12978EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2015/02/12 12:00 a.m.•67 views

SuSE 11.3 Security Update : ntp (SAT Patch Number 10293)

ntp has been updated to fix four security issues : - ntp-keygen used a weak RNG seed, which made it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. bsc910764. CVE-2014-9294 - The configauth function, when an auth key is not configured, improperl...

7.5CVSS6.9AI score0.12978EPSS
SaveExploits2References10
Prion
Prion
•added 2014/12/20 2:59 a.m.•26 views

Design/Logic Flaw

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS6.9AI score0.12978EPSS
SaveExploits1References21Affected Software1
NVD
NVD
•added 2014/12/20 2:59 a.m.•33 views

CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS3.9AI score0.12978EPSS
SaveExploits1References21
osv_debian
osv_debian
•added 2014/12/20 2:59 a.m.•13 views

DEBIAN-CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS7.4AI score0.12978EPSS
SaveExploits1References1
CVE
CVE
•added 2014/12/20 2:00 a.m.•373 views

CVE-2014-9293

CVE-2014-9293 affects ntpd and is triggered when no authentication key is configured; ntpd may generate a cryptographically weak default key, enabling remote attackers to bypass cryptographic protections via brute-force. The IBM AIX advisory confirms weak default key handling for NTPv3/v4 and lis...

7.5CVSS7.4AI score0.12978EPSS
SaveExploits1References21Affected Software1
Cvelist
Cvelist
•added 2014/12/20 2:00 a.m.•115 views

CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

5.6AI score0.12978EPSS
SaveExploits1References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/20 12:00 a.m.•5 views

CVE-2014-9293: Undefined Security Weakness

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS7.3AI score0.12978EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2014/12/19 12:00 a.m.•69 views

CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS7.1AI score0.12978EPSS
SaveExploits1References5
Rows per page
Query Builder