Lucene search
K

5769 matches found

Cvelist
Cvelist
added 2005/10/18 4:0 a.m.12 views

CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

6AI score0.00633EPSS
Exploits0References8
CVE
CVE
added 2005/10/18 4:0 a.m.70 views

CVE-2005-3256

CVE-2005-3256 affects Enigmail, where the key selection dialogue in versions before 0.92.1 can choose a key whose user ID has no additional information. This can lead to encrypting with the wrong public key, potentially enabling disclosure of confidential data. The issue is described in multiple ...

5CVSS6AI score0.00633EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2005/10/18 4:0 a.m.23 views

CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

5CVSS6.2AI score0.00633EPSS
Exploits0
Cvelist
Cvelist
added 2005/09/27 4:0 a.m.13 views

CVE-2005-3087

The SecureW2 3.0 TLS implementation uses weak random number generators rand and srand from system time during generation of the pre-master secret PMS, which makes it easier for attackers to guess the secret and decrypt sensitive data...

6.4AI score0.00305EPSS
Exploits0References2
myhack58
myhack58
added 2005/09/23 12:0 a.m.27 views

Foreign hackers resources-vulnerability warning-the black bar safety net

allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...

0.2AI score
Exploits0
OSV
OSV
added 2005/08/24 4:0 a.m.8 views

CVE-2005-2532

OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service client disconnection via a large number of packets that can not be decrypted...

5.9AI score
Exploits0References7
OSV
OSV
added 2005/08/24 4:0 a.m.2 views

DEBIAN-CVE-2005-2532

OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service client disconnection via a large number of packets that can not be decrypted...

5CVSS6.7AI score0.01476EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2005/07/20 12:0 a.m.29 views

SOL4944 - SSL decryption vulnerabilities - CR47778, CR48873, CR53987, CR54002

Workaround If upgrading is not an immediate option, you can prevent exploitation of these vulnerabilities temporarily by disabling NATIVE ciphers on any clientssl or serverssl profiles that require or request authentication. To do so, add :!NATIVE to the profiles' ciphers option available in the...

3.2AI score
Exploits0Affected Software1
CVE
CVE
added 2005/06/21 4:0 a.m.42 views

CVE-2002-1696

The CVE concerns Microsoft Outlook plug-in PGP 7.0, 7.0.3, and 7.0.4. When the user replies to an encrypted message with the option “Automatically decrypt/verify when opening messages” enabled and “Always use Secure Viewer when decrypting” disabled, a decrypted copy of the message is silently sav...

5.5CVSS6.8AI score0.0008EPSS
Exploits0References3Affected Software1
Packet Storm
Packet Storm
added 2005/06/18 12:0 a.m.26 views

UPBdecrypt.pl.txt

!/usr/bin/perl Passwords Decrypter for UPB $optf" || die "- Unable to open $optf: $!"; print RESULTS "Results for $opth\n","="x40,"\n\n"; for$in=0;$in/ && print RESULTS "Username: $1\n"; $page$in=m/^$1.?/ && print RESULTS "Crypted P...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2005/06/16 12:0 a.m.30 views

Ultimate PHP Board 1.9.6 GOLD - users.dat Password Decryptor

!/usr/bin/perl Passwords Decrypter for UPB $optf" || die "- Unable to open $optf: $!"; print RESULTS "Results for $opth\n","="x40,"\n\n"; for$in=0;$in/ && print RESULTS "Username: $1\n"; $page$in=m/^$1.?/ && print R...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2005/06/01 4:0 a.m.14 views

CVE-2004-2136

dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...

6.4AI score0.0007EPSS
Exploits1References3
Cvelist
Cvelist
added 2005/06/01 4:0 a.m.18 views

CVE-2004-2135

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...

6.4AI score0.00989EPSS
Exploits1References4
CVE
CVE
added 2005/06/01 4:0 a.m.49 views

CVE-2004-2136

The CVE-2004-2136 entry concerns dm-crypt in the Linux kernel (2.6.x) used on certain filesystems with block sizes of 1024 or greater. The underlying issue is an IV computation weakness in the encryption mode that can allow watermarked files to be detected without decrypting the data. The availab...

2.1CVSS6.9AI score0.0007EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2005/06/01 4:0 a.m.47 views

CVE-2004-2135

Cryptoloop in Linux kernel 2.6.x, when used on file systems with a block size of 1024 or greater, contains IV computation weaknesses that allow watermarked files to be detected without decryption. The documented impact is PARTIAL confidentiality loss. No exploits, specific remediations, or affect...

2.1CVSS6.9AI score0.00989EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2005/05/10 4:0 a.m.59 views

CVE-2005-0039

CVE-2005-0039 describes vulnerabilities in IPsec configurations where using ESP in tunnel mode (with CBC mode) or AH without proper integrity protections allows an attacker to modify the outer packet and cause the inner, encrypted data to be exposed in plaintext via ICMP messages. The attacks inc...

6.4CVSS6.7AI score0.01901EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2005/04/15 4:0 a.m.47 views

CVE-2001-0160

CVE-2001-0160 involves Lucent/ORiNOCO WaveLAN wireless cards where the Initialization Vector (IV) values used by WEP are predictable. This weakens the confidentiality of WEP-protected traffic because a remote attacker can build information to decrypt messages. The underlying issue is compromised ...

5CVSS6.9AI score0.0022EPSS
Exploits1References1Affected Software2
NVD
NVD
added 2005/01/27 5:0 a.m.16 views

CVE-2004-0927

ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions...

5CVSS6.7AI score0.00186EPSS
Exploits0References2
NVD
NVD
added 2005/01/10 5:0 a.m.12 views

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

2.1CVSS6.5AI score0.00051EPSS
Exploits0References2
Cvelist
Cvelist
added 2004/12/15 5:0 a.m.17 views

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

6.5AI score0.00051EPSS
Exploits0References2
Rows per page
Query Builder