Lucene search
+L

3264 matches found

Prion
Prion
added 2008/12/17 8:30 p.m.22 views

Design/Logic Flaw

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...

7.5CVSS6.9AI score0.03346EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2008/12/17 8:0 p.m.32 views

CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...

6.4AI score0.03346EPSS
SaveExploits2References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/12/17 6:30 a.m.8 views

Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Overview Access Analyzer CGI from futomi's CGI Cafe contains a predictable session ID vulnerability. Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a predictable session ID vulnerability. Impact A remote attacker could...

5.8CVSS6.6AI score0.0101EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/12/12 12:0 a.m.44 views

JVN#07468800 Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a predictable session ID vulnerability. Impact A remote attacker could impersonate an administrator of Access Analyzer CGI. As a result, a remote attacker could view access...

5.8CVSS6.3AI score0.0101EPSS
SaveExploits0
Prion
Prion
added 2008/12/05 11:30 a.m.18 views

Code injection

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

6.4CVSS6.2AI score0.03478EPSS
SaveExploits1References39Affected Software3
NVD
NVD
added 2008/12/05 11:30 a.m.19 views

CVE-2008-5360

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

6.4CVSS7.5AI score0.03478EPSS
SaveExploits1References39
Cvelist
Cvelist
added 2008/12/05 11:0 a.m.33 views

CVE-2008-5360

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

7.5AI score0.03478EPSS
SaveExploits1References39
UbuntuCve
UbuntuCve
added 2008/12/05 12:0 a.m.35 views

CVE-2008-5360

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

6.4CVSS7AI score0.03478EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2008/12/04 3:45 p.m.12 views

OpenJDK temporary files have guessable file names (6721753)

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

6.4CVSS7.1AI score0.03478EPSS
SaveExploits1References4
OSV
OSV
added 2008/11/30 12:0 a.m.10 views

DSA-1674-1 jailer - denial of service

Bulletin has no description...

6.9CVSS6.7AI score0.00295EPSS
SaveExploits0
NVD
NVD
added 2008/11/26 11:30 p.m.29 views

CVE-2008-5162

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various...

7CVSS6.6AI score0.00319EPSS
SaveExploits1References5
seebug.org
seebug.org
added 2008/11/26 12:0 a.m.41 views

FreeBSD arc4random (9)伪随机数生成器不充分漏洞

BUGTRAQ ID: 32447 CVECAN ID: CVE-2008-5162 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD内核中广泛使用arc4random9随机数生成器,一些应用依赖于该随机数生成器的加密强度。arc4random9定期用来自FreeBSD内核的Yarrow随机数生成器的熵重新提供种子,Yarrow随机数生成器从包括硬件中断等各种来源收集熵。在引导阶段,从用户域向Yarrow随机数生成器提供了额外的,以确保加密中有足够的熵。...

6.9CVSS6.4AI score0.00319EPSS
SaveExploits1
FreeBSD
FreeBSD
added 2008/11/24 12:0 a.m.35 views

FreeBSD -- arc4random(9) predictable sequence vulnerability

Problem Description: When the arc4random9 random number generator is initialized, there may be inadequate entropy to meet the needs of kernel systems which rely on arc4random9; and it may take up to 5 minutes before arc4random9 is reseeded with secure entropy from the Yarrow random number...

7CVSS6.8AI score0.00319EPSS
SaveExploits1
FreeBSD Advisory
FreeBSD Advisory
added 2008/11/24 12:0 a.m.24 views

FreeBSD-SA-08:11.arc4random

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08.11.arc4random Security Advisory The FreeBSD Project Topic: arc4random9 predictable sequence vulnerability Category: core Module: sys Announced: 2008-11-24...

7CVSS7.1AI score0.00319EPSS
SaveExploits1
securityvulns
securityvulns
added 2008/11/14 12:0 a.m.45 views

[USN-670-1] VMBuilder vulnerability

=========================================================== Ubuntu Security Notice USN-670-1 November 13, 2008 vm-builder vulnerability https://bugs.launchpad.net/+bug/296841 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu...

0.2AI score
SaveExploits0
Ubuntu
Ubuntu
added 2008/11/13 10:57 p.m.32 views

USN-670-1: VMBuilder vulnerability

Mathias Gug discovered that vm-builder improperly set the root password when creating virtual machines. An attacker could exploit this to gain root privileges to the virtual machine by using a predictable password. This vulnerability only affects virtual machines created with vm-builder under...

5.5AI score
SaveExploits0References1
Nmap
Nmap
added 2008/11/06 2:52 a.m.300 views

dns-random-txid NSE Script

Checks a DNS server for the predictable-TXID DNS recursion vulnerability. Predictable TXID values can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying txidtest.dns-oarc.net see . Be aware that any targets against which this script is run will...

10CVSS0.99448EPSS
SaveExploits54
Nmap
Nmap
added 2008/11/06 2:52 a.m.403 views

dns-random-srcport NSE Script

Checks a DNS server for the predictable-port recursion vulnerability. Predictable source ports can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying porttest.dns-oarc.net see . Be aware that any targets against which this script is run will be...

10CVSS8.8AI score0.99448EPSS
SaveExploits54
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.21 views

Gentoo Security Advisory GLSA 200409-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 200409-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

4.6CVSS6.5AI score0.00515EPSS
SaveExploits0
Prion
Prion
added 2008/09/11 1:13 a.m.29 views

Design/Logic Flaw

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection...

7.5CVSS6.7AI score0.03519EPSS
SaveExploits1References10Affected Software1
Rows per page
Query Builder