2362 matches found
CVE-2002-0570
CVE-2002-0570 : The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, allowing local users to modify encrypted data without knowing the key. The affected component is the loop device encryption code in these kernels. The provided do...
CVE-1999-1530
CVE-1999-1530 affects Cobalt RaQ2/RaQ3i environments where the cgiwrap component fails to properly identify users when running scripts. This allows a malicious site administrator to view or modify data located at another virtual site on the same system. The vulnerability is documented in CVE-1999...
kebi-webmail_vul.txt
kebi-Webmail Solution vulnerability Tested by secret e-mail: [email protected] Summary : Get webmail server's admin competence by remote attack in kebi-Webmail Solution. Platform: Attacker platform : All Operating Systems + Web browser Target platform: All kebi Webmail solution loading server ke...
Possible Issue with Netinfo and Mac OS X
Hi, I have been using Mac OS X for quite a while now, and I have just found something that concerns me a little. As you probably know Mac OS X is based on BSD and by default does not have any services running though it is not hard to turn these on thefore is reasonably secure out of the box. Now ...
Microsys CyberPatrol 4.0 4.0034.0 4.005 - Insecure Registration
Microsys CyberPatrol 4.0 4.0034.0 4.005 - Insecure Registration source: https://www.securityfocus.com/bid/1977/info CyberPatrol is popular web access restriction software by Microsys. A vulnerability exists in the way CyberPatrol submits registration information from its client software to...
CVE-2000-0678
CVE-2000-0678 affects PGP 5.5.x through 6.5.3. The flaw: ADKs are not checked in the signed portion of a public certificate, so an attacker who modifies a victim’s certificate can decrypt data encrypted with that modified certificate. Exploitation requires a modified certificate and a sender usin...
University of Washington pop2d 4.46/4.51/4.54/4.55 - Remote File Read
source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap package are affected. Any user who has a pop account on the machine can...
Citrix Metaframe 1.0/1.8 - Weak Encryption
// source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection can obtain user access to the server. The I...
CVE-2000-0220
ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...
CVE-2000-0068
The CVE-2000-0068 entry concerns the daynad component of Intel InBusiness E-mail Station. The issue arises because the daynad program does not require authentication, enabling remote attackers to modify configuration, delete files, or read mail. The provided sources state the vulnerability and im...
key.randomness.backfire.txt
Date: Thu, 11 Mar 1999 15:02:01 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Are your secrets safe? crypto http://www.newscientist.com/cgi-bin/pageserver.cgi?/ns/19990313/newsstory3.html Are your secrets safe? Duncan Graham-Rowe THEY MAY LOOK HARMLESS but screensavers could betray you...
icsa.certified.weak.crypto.txt
Date: Thu, 27 May 1999 00:24:26 -0700 From: Lucky Green To: [email protected] Subject: ICSA certifies weak crypto as secure I am becoming concerned about the apparent lack of professional competence within even well-known segments of the security community. I hope the incident I discovered is ...
CVE-1999-1430
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb Microsoft Access file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access...
John S.2 Roberts AnyForm 1.0/2.0 - CGI Semicolon
source: https://www.securityfocus.com/bid/719/info AnyForm is a popular form CGI designed to support simple forms that deliver responses via email. Certain versions of AnyForm did not perform user supplied data sanity checking and could be exploited by remote intruders to execute arbitrary...
