X servers may have insecure default configuration of xhosts

Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...

CVE-2002-2203

Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information...

Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities

Vulnerable All versions of Microsoft Windows using encrypted RDP are vulnerable to the checksum vulnerability. The following versions are also vulnerable to the keystroke vulnerability: Microsoft Windows XP Professional Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsof...

Weaknesses in the SSH protocol simplify brute-force attacks against passwords typed in an existing SSH session

Overview There is a vulnerability in the SSH protocol that can simplify brute force attacks against passwords typed within an existing SSH session. Description Researchers at the University of California at Berkeley have determined that by monitoring the delays between SSH packets transmitted...

Logitech vulnerability (DoS, man-in-the-middle-attack) - Resend

Preface: Every information provided is based on the tested devices. We cannot ensure that other sets, sold elsewhere, may be vulnerable OR NOT! Devices tested: Logitech Cordless Desktop, sold in Germany. Keyboard: M/N: Y-RC14 P/N: 867097-0102 125283-401A S/N: MCU04607129 Working at 27.145 MHz in...

@stake Advisory: Multiple Vulnerabilities in iCal 2.1 (A100900-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Multiple Vulnerabilities in iCal 2.1 Release Date: 10/09/2000 Application: iPlanet's iCal version 2.1 Patch 2 Platform: Solaris 2.6 Severity: Local attacker can obtain root access Author:...

Уязвимости GNU Emacs

В программах, основанных на Emacs можно контролировать PTY пользователя, небезопасно создаются временные файлы легко угадываемое имя, хранится последовательность нажатых клавиш, что позволяет извлечь пароль пользователя...