Lucene search
+L

8 matches found

BDU FSTEC
BDU FSTEC
added 2015/04/29 12:00 a.m.11 views

The vulnerability of the microprogramming software of the Cisco Nexus 7000 allows a remote attacker to bypass the device’s security mechanisms.

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...

7.3CVSS7.2AI score0.12978EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2015/02/12 12:00 a.m.55 views

SuSE 11.3 Security Update : ntp (SAT Patch Number 10293)

ntp has been updated to fix four security issues : - ntp-keygen used a weak RNG seed, which made it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. bsc910764. CVE-2014-9294 - The configauth function, when an auth key is not configured, improperl...

7.5CVSS6.9AI score0.12978EPSS
SaveExploits2References10
NVD
NVD
added 2014/12/20 2:59 a.m.30 views

CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS3.9AI score0.12978EPSS
SaveExploits1References21
Prion
Prion
added 2014/12/20 2:59 a.m.23 views

Design/Logic Flaw

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS6.9AI score0.12978EPSS
SaveExploits1References21Affected Software1
OSV
OSV
added 2014/12/20 2:59 a.m.6 views

DEBIAN-CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS7.4AI score0.12978EPSS
SaveExploits1References1
CVE
CVE
added 2014/12/20 2:00 a.m.327 views

CVE-2014-9293

CVE-2014-9293 affects ntpd and is triggered when no authentication key is configured; ntpd may generate a cryptographically weak default key, enabling remote attackers to bypass cryptographic protections via brute-force. The IBM AIX advisory confirms weak default key handling for NTPv3/v4 and lis...

7.5CVSS7.4AI score0.12978EPSS
SaveExploits1References21Affected Software1
Cvelist
Cvelist
added 2014/12/20 2:00 a.m.32 views

CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

5.6AI score0.12978EPSS
SaveExploits1References21
UbuntuCve
UbuntuCve
added 2014/12/19 12:00 a.m.63 views

CVE-2014-9293

The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

7.5CVSS7.1AI score0.12978EPSS
SaveExploits1References5
Rows per page
Query Builder