Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

realtor-sql.txt

--==+================================================================================+==-- --==+ Realtor 747 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: http://www.it747.com/realtor747...

Realtor 747 (index.php categoryid) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ==================================================================== Realtor 747 index.php categoryid Remote SQL Injection Vulnerbility ====================================================================...

Realtor 747 - index.php?categoryId SQL Injection

Realtor 747 - index.php?categoryId SQL Injection --==+================================================================================+==-- --==+ Realtor 747 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

CVE-2007-2332

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...

CVE-2007-2332

The CVE-2007-2332 issue affects Nortel VPN Router (Contivity) models 1000/2000/4000/5000 prior to 6_05.140. The underlying weakness is a fixed DES key used to encrypt passwords, enabling remote authenticated users to brute-force a password from the LDAP store. Impact is credential exposure for pa...

Unix/BSD/Linux the password mechanism of the century-vulnerability and early warning-the black bar safety net

Freebird [email protected] 1. Overview Early U N I X system to a user password stored in a plain text readable“password file”, which may be in the system administrator's attention to the case of not being intercepted and exposed. It also may have been in one accident in the leak. From AT&T UNIX...

Digipass Go3 - Insecure Encryption

// source: https://www.securityfocus.com/bid/21040/info Digipass Go3 is prone to an insecure-encryption vulnerability because the device uses an insecure encryption algorithm to encrypt sensitive data. An attacker can exploit this issue to brute-force the encryption key and gain access to...

Solaris 2.6 (i386) : 105650-01

The remote host is missing Sun Security Patch number 105650-01 Solstice FireWall-1 3.0: x86 Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 2.5.1 (sparc) : 105647-01

The remote host is missing Sun Security Patch number 105647-01 Solstice FireWall-1 3.0: Sparc Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...

Solaris 2.6 (sparc) : 105647-01

The remote host is missing Sun Security Patch number 105647-01 Solstice FireWall-1 3.0: Sparc Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...

Solaris 2.5.1 (i386) : 105650-01

The remote host is missing Sun Security Patch number 105650-01 Solstice FireWall-1 3.0: x86 Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Windows RASMAN registry corruption vulnerability

Added: 07/28/2006 CVE: CVE-2006-2371 BID: 18358 OSVDB: 26436 Background The Routing and Remote Access Service RRAS allows a Windows computer to act as a router, dial-up access server, VPN server, or network address translator. The Remote Access Connection Manager RASMAN service handles the detail...

Windows RASMAN registry corruption vulnerability

Added: 07/28/2006 CVE: CVE-2006-2371 BID: 18358 OSVDB: 26436 Background The Routing and Remote Access Service RRAS allows a Windows computer to act as a router, dial-up access server, VPN server, or network address translator. The Remote Access Connection Manager RASMAN service handles the detail...

CVE-2006-0584

CVE-2006-0584 affects PeopleSoft People Tools 8.4x where the PSCipher function uses PKCS #5 with a fixed DES key to store passwords. This enables local attackers to perform dictionary-style guessing by comparing output strings. The provided documents describe the root cause (fixed DES key) and im...

CVE-2006-0584

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

PeopleSoft (Oracle) PSCipher Encryption Weakness

Vendor: PeopleSoft Product: People Tools Version: 8.4x Platform: Multi-platform Title: Weak Encryption Description: PeopleSoft uses PSCipher for encryption/hashing purposes. Based on observations from the output of PSCipher and on our familiarity with the cryptographic library objects and methods...

Peoplesoft People Tools PSCipher() function weak encryption

Weak DES block cypher without feedback is used...

SSH Secure-RPC Weak Encrypted Authentication

You are running SSH Communications Security SSH 1.2.27 - 1.2.30. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql Injection in CJ Ultra Plus v1.0.3-1.0.4

ADVISORY Sql Injection in CJ Ultra Plus v1.0.3-1.0.4? "My God, it's full of stars" - c MwNN Vulnerable code is in out.php ---code begin-- ... if isset$perm $query = "select a1, a2 from trade where a1 = '$perm'"; -muhahaha $result = mysqlquery$query; if!$result errormessagesqlerror; ... ---code...