4207 matches found
CVE-2003-1391
RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase...
CVE-2003-1099
shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack...
CVE-2003-1017
CVE-2003-1017 affects Macromedia Flash Player before 7.0.19.0. The vulnerability arises because Flash data files are stored in a predictable location accessible to web browsers, allowing remote attackers to read restricted files via browser vulnerabilities that rely on predictable file names. The...
CVE-2003-1017: Undefined Security Weakness
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names...
CVE-2003-0945
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...
CVE-2003-0945
CVE-2003-0945 affects SAP DB Web-tools Web Database Manager prior to 7.4.03.30. The vulnerability stems from generating predictable session IDs in the Web Database Manager, with IDs placed in the URL, enabling remote attackers to perform unauthorized activities. The issue is addressed by SAP with...
CVE-2003-0945: Undefined Security Weakness
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...
CVE-2003-0950: Undefined Security Weakness
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...
CVE-2003-0877
Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory...
Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location
source: https://www.securityfocus.com/bid/8900/info Macromedia Flash Player is reported to store Flash cookies .sol files in a predictable location on client systems. Other attacks are possible given the ability to store content on a system in a predictable location, such as referencing the conte...
Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location
Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location source: https://www.securityfocus.com/bid/8900/info Macromedia Flash Player is reported to store Flash cookies .sol files in a predictable location on client systems. Other attacks are possible given the ability to store conte...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (perl)
Exploit for linux platform in category remote exploits the debian openssl issue leads that there are only 65.536 possible ssh keys generated, cause the only entropy is the pid of the process generating the key. This leads to that the following perl script can be used with the precalculated ssh ke...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
DEBIAN-CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Apache::Gallery (Gallery.pm) is vulnerable to local code execution due to predictable temporary filenames used when executing Inline::C. The underlying issue is the creation/modification race on temporary files before Apache::Gallery handles them. Affected component: Gallery.pm within Apache::Gal...
CVE-2003-0771: Undefined Security Weakness
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
DEBIAN-CVE-2003-0596
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...
IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities (2)
IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities 2 // source: https://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue...