64 matches found
Authentication flaw
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...
CVE-2021-0297 Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...
CVE-2021-0297
The CVE-2021-0297 issue affects Juniper Networks Junos OS Evolved: TCP MD5 authentication processing may allow a BGP/LDP session with MD5 enabled to succeed against a peer that is not configured for MD5. Affected are Junos OS Evolved versions prior to 20.3R2-S1-EVO, 20.4 prior to 20.4R2-EVO, and ...
PT-2021-12983
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.3R2-S1-EVO Juniper Networks Junos OS Evolved versions 20.4 prior to 20.4R2-EVO Juniper Networks Junos OS Evolved versions 21.1 prior to 21.1R2-EVO Description: A vulnerability in the...
CVE-2021-0297: Improper Handling of Exceptional Conditions
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...
UBUNTU-CVE-2021-33900
While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism DIGEST-MD5, GSSAPI was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue...
GaussDB Kernel: Prohibiting host Entries from Using MD5 Authentication in the pg_hba.conf File
MD5 authentication is insecure. You are advised to use SHA256 authentication. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...
openGauss: Prohibiting host Entries from Using MD5 Authentication in the pg_hba.conf File
MD5 authentication is insecure. You are advised to use SHA256 authentication. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...
Huawei Data Communication: Deploying LDP Authentication
LDP MD5 authentication is deployed to prevent attackers from attempting to use protocols on the control plane to destroy entries on which forwarding depends, such as routes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...
CVE-2020-3165
A vulnerability in the implementation of Border Gateway Protocol BGP Message Digest 5 MD5 authentication in Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass MD5 authentication and establish a BGP connection with the device. The vulnerability occurs because the BGP MD...
CVE-2020-3165
Cisco NX-OS Software CVE-2020-3165 is a BGP MD5 authentication bypass in which MD5 authentication can be bypassed if the peer does not have MD5 configured while the NX-OS device does, and the VRF name exceeds 19 characters. An unauthenticated, remote attacker could establish a BGP session with th...
PT-2020-1994
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the implementation of Border Gateway Protocol BGP Message Digest 5 MD5 authentication could allow an unauthenticated, remote attacker to bypass MD5...
CVE-2020-3165: Use of Hard-coded Credentials
A vulnerability in the implementation of Border Gateway Protocol BGP Message Digest 5 MD5 authentication in Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass MD5 authentication and establish a BGP connection with the device. The vulnerability occurs because the BGP MD...
IBM Domino IMAP Server Buffer Overflow Vulnerability
IBM Domino is prone to a buffer overflow vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...
VulnCheck KEV: CVE-2007-1675
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...
Juniper Junos OSPF Protocol Vulnerability (JSA10582)
According to its self-reported version number, the remote Juniper Junos device has a flaw in its OSPF implementation. A rogue router in the same autonomous system AS could exploit this to control the routing tables of all other routers in the AS. Note that this issue does not affect device with o...
CVE-2013-0249
Stack-based buffer overflow in the Curlsaslcreatedigestmd5message function in lib/curlsasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string...
cURL and libcurl MD5 Digest Buffer Overflow (CVE-2013-0249)
The vulnerability is due to an error in Curlsaslcreatedigestmd5message while negotiating SASL DIGEST-MD5 authentication. A remote attacker can exploit this vulnerability by enticing a user to connect to a malicious server. This can lead to code execution in the context of the affected application...
IBM Tivoli Directory Server buffer overflow
Buffer overflow in LDAP TCP/389 CRAM-MD5 authentication...
Debian Security Advisory DSA 1059-1 (quagga)
The remote host is missing an update to quagga announced via advisory DSA 1059-1. Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-2223 Remote attackers...