EUVD-2016-5866

Malware in sbrugna...

CVE-2016-4890: Undefined Security Weakness

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

JVN#72559412: ManageEngine ServiceDesk Plus uses an insecure method for cookie generation

ManageEngine ServiceDesk Plus provided by Zoho Corporation is a help desk software. ManageEngine ServiceDesk Plus uses an insecure method for generating cookies. Impact If an attacker obtains a user's cookie, the password contained in the cookie can be easily guessed. Solution Update the software...

Fedora 11 : slim-1.3.1-9.fc11 (2009-13551)

Tue Dec 22 2009 Lorenzo Villani - 1.3.1-9 - Fix CVE-2009-1756 bugzilla: 544024 - Fix MIT insecure cookie generation patch from Debian - Fix build with GCC 4.4 - Sat Oct 10 2009 Lorenzo Villani - 1.3.1-8 - Fix BZ 518068 - Sun Jul 26 2009 Fedora Release Engineering - 1.3.1-7 - Rebuilt for...