CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

Details have emerged about a vulnerability impacting the "wall" command of the util-linux package that could be potentially exploited by a bad actor to leak a user's password or alter the clipboard on certain Linux distributions. The bug, tracked as CVE-2024-28085, has been codenamed WallEscape b...

util-linux wall Escape Sequence Injection

Wall-Escape CVE-2024-28085 Skyler Ferrante: Escape sequence injection in util-linux wall ================================================================= Summary ================================================================= The util-linux wall command does not filter escape sequences from...

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

Code injection

totd before 1.5.3 does not properly randomize mesg IDs...

CVE-2022-34295

CVE-2022-34295 affects totd, a DNS proxy nameserver by F.W. Dillema. The flaw stems from improper randomization of message IDs in versions prior to 1.5.3. The impact is exposure of how messages are matched/handled due to weak ID randomness, with the CVSS metrics indicating moderate severity (CVSS...

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

CVE-2022-34295: Use of Insufficiently Random Values

totd before 1.5.3 does not properly randomize mesg IDs...

PT-2022-22111

Name of the Vulnerable Software and Affected Versions totd versions prior to 1.5.3 Description The issue is related to the improper randomization of mesg IDs. Recommendations For versions prior to 1.5.3, update to version 1.5.3 or later to resolve the issue...

PT-2013-1677

Name of the Vulnerable Software and Affected Versions Ruby versions 1.8.7 before patchlevel 371 Ruby versions 1.9.3 before patchlevel 286 Ruby versions 2.0 before revision r37068 Description The issue allows context-dependent attackers to bypass safe-level restrictions and modify untainted string...

HP-UX Security Patch : PHKL_29911

Improper core file mesg, corrupt core file %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26396; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...