2202 matches found
DEBIAN-CVE-2011-0766
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys...
CVE-2011-0766
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys...
CVE-2011-0766
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys...
Code injection
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys...
CVE-2011-0766
CVE-2011-0766 affects the Crypto application (before 2.0.2.2) and SSH (before 2.0.5) as used by the Erlang/OTP SSH library before R14B03. The root cause is the use of predictable seeds based on the current time for the random number generator, enabling remote attackers to guess DSA host and SSH s...
DSA-2248-1 ejabberd - denial of service
Bulletin has no description...
PT-2011-2617 · Ericsson · Erlang/Otp
Name of the Vulnerable Software and Affected Versions: Crypto application versions prior to 2.0.2.2 SSH versions prior to 2.0.5 Erlang/OTP ssh library versions prior to R14B03 Description: The random number generator uses predictable seeds based on the current time, making it easier for remote...
CVE-2011-0766: Undefined Security Weakness
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys...
Erlang/OTP SSH库随机数生成漏洞
Bugtraq ID: 47980 CVE ID：CVE-2011-0766 Erlang是一种通用的面向并发的编程语言，OTP是包装在Erlang中的一组库程序。 Erlang/OTP ssh库依靠强大的加密随机数实现多个加密操作，但是库使用的RNG加密不够强壮，而且使用了可预测种子数据而进一步削弱了加密强度。RNGWichman-Hill没有与熵源进行混合处理。 库中所有ssh连接的种子使用当前时间大约微秒分辨率，通过观察从这个库建立的连接时间，可猜测三个RNG种子中前两个组成部分，第三个可通过尝试每个可能的值1..1000000暴力破解恢复。...
FreeBSD : Erlang -- ssh library uses a weak random number generator (e4833927-86e5-11e0-a6b4-000a5e1e33c6)
US-CERT reports : The Erlang/OTP ssh library implements a number of cryptographic operations that depend on cryptographically strong random numbers. Unfortunately the RNG used by the library is not cryptographically strong, and is further weakened by the use of predictable seed material. The RNG...
Erlang/OTP SSH library uses a weak random number generator
Overview The Erlang/OTP SSH library's random number generator is not cryptographically strong because it relies on predictable seed material. Description Geoff Cant's report states:The Erlang/OTP ssh library implements a number of cryptographic operations that depend on cryptographically strong...
Erlang -- ssh library uses a weak random number generator
US-CERT reports: The Erlang/OTP ssh library implements a number of cryptographic operations that depend on cryptographically strong random numbers. Unfortunately the RNG used by the library is not cryptographically strong, and is further weakened by the use of predictable seed material. The RNG...
Stored and Reflective XSS in Yaws-Wiki 1.88-1 (Erlang)
Software: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Original Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki Edit:/etc/yaws/conf.d/yaws-wiki.conf add this: server wiki po...
Yaws-Wiki 1.88-1 (Erlang) Stored and Reflective XSS Vulnerabilities
Exploit for php platform in category web applications Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki...
epmd-info NSE Script
Connects to Erlang Port Mapper Daemon epmd and retrieves a list of nodes with their respective port numbers. Example Usage nmap -p 4369 --script epmd-info Script Output PORT STATE SERVICE 4369/tcp open epmd | epmd-info.nse: | epmdport: 4369 | nodes: | rabbit: 36804 | ejabberd: 46540 Requires nmap...
Yaws-Wiki 1.88-1 (Erlang) - Persistent Reflective Cross-Site Scripting
Yaws-Wiki 1.88-1 Erlang - Persistent Reflective Cross-Site Scripting Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install...
Yaws Wiki 1.88-1 Cross Site Scripting
Software: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Original Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki Edit:/etc/yaws/conf.d/yaws-wiki.conf add this: port = 8181...
Yaws-Wiki 1.88-1 (Erlang) - Persistent / Reflective Cross-Site Scripting
Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki Edit:/etc/yaws/conf.d/yaws-wiki.conf add this: port = 8181...
Apache CouchDB Detection
The remote server is running CouchDB, a document-oriented database system written in Erlang. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51922; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT",...