CVE-2013-5173

CVE-2013-5173: The kernel random-number generator in Apple Mac OS X before 10.9 allows local users to cause a denial of service (partial availability) by issuing requests for many random numbers. Affected: Mac OS X prior to 10.9. No remediation details are provided in the supplied documents.

CVE-2013-5173

The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing of large requests, which allows local users to cause a denial of service temporary generator outage via an application that requires many random numbers...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20131022)

A flaw was found in the way the Linux kernel handled the creation of temporary IPv6 addresses. If the IPv6 privacy extension was enabled /proc/sys/net/ipv6/conf/eth0/usetempaddr is set to '2', an attacker on the local network could disable IPv6 temporary address generation, leading to a potential...

Debian DSA-2781-1 : python-crypto - PRNG not correctly reseeded in some situations

A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...

Debian Security Advisory DSA 2781-1 (python-crypto - PRNG not correctly reseeded in some situations)

A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...

ZeroShell 'cgi-bin/kerbynet' - Local File Disclosure

Introduction to the PoC : ====================================================================== In this distribution, the managment website is a binary file named "kerbynet" interpreted in cgi-bin directory here : /cdrom/usr/local/apache2/cgi-bin/kerbynet So all url look like this :...

Fedora 20 : python-pyrad-2.0-3.fc20 (2013-15838)

Better random number genetator Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Experts Worry About Long-Term Implications of NSA Revelations

With all of the disturbing revelations that have come to light in the last few weeks regarding the NSA’s collection methods and its efforts to weaken cryptographic protocols and security products, experts say that perhaps the most worrisome result of all of this is that no one knows who or what...

Fedora 18 : python-pyrad-2.0-3.fc18 (2013-15877)

Better random number genetator Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 19 : python-pyrad-2.0-3.fc19 (2013-15891)

Better random number genetator Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Bitcoins - Secured by NSA designed Encryption or Backdoored ?

It’s been nearly three months since Edward Snowden started telling the world about the National Security Agency’s mass surveillance of global communications. After the last week report that the National Security Agency has leveraged its cooperative relationships with specific industry partners to...

Fedora Update for libtomcrypt FEDORA-2013-14488

Check for the Version of libtomcrypt OpenVAS Vulnerability Test Fedora Update for libtomcrypt FEDORA-2013-14488 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Warning: Android Bitcoin wallet apps vulnerable to theft

A critical vulnerability in the Android implementation of the Java SecureRandom random number generator was discovered, that leaves Bitcoin digital wallets on the mobile platform vulnerable to theft. Before the announcement was made, users on the forums had noticed over 55 BTC were stolen a few...

Warning: Android Bitcoin wallet apps vulnerable to theft

A critical vulnerability in the Android implementation of the Java SecureRandom random number generator was discovered, that leaves Bitcoin digital wallets on the mobile platform vulnerable to theft. Before the announcement was made, users on the forums had noticed over 55 BTC were stolen a few...

Bitcoin Wallets on Android Vulnerable to Theft

Bitcoin wallets on the Android platform are vulnerable to theft after a vulnerability was discovered that could allow an attacker to guess a private key used to secure transactions involving the virtual currency. A post to a Bitcoin forum over the weekend pointed to a report of one address having...

Oracle Linux 5 : kernel (ELSA-2009-1455)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1455 advisory. - Revert: net atalk/irda: memory leak to user in getname Danny Feng 519309 519310 CVE-2009-3001 CVE-2009-3002 - net atalk/irda: memory leak to user in getname...

Oracle Linux 4 : php (ELSA-2008-0545)

From Red Hat Security Advisory 2008:0545 : Updated php packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

Oracle Linux 5 : php (ELSA-2010-0919)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0919 advisory. - add security fix for CVE-2010-3870 626735 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

PT-2013-02: Password Reset Token Prediction in FluxBB

The specialists of Positive Technologies have detected a "Password Reset Token Prediction" vulnerability in FluxBB. The vulnerability was detected in password reset token generation algorithm. FluxBB generates weak random numbers using mtrand function: function randomkey$len, $readable = false,...

Flawed EMV Chip-and-PIN Protocol Paves Way To Fraudulent ATM and POS Transactions

A flaw in the EMV protocol which lays out the rules for chip-and-PIN card transactions at ATMs and point-of-sale terminals could enable persistent attackers to carry out bogus card transactions. Five Cambridge UK University researchers released a paper today with the gory details. Foremost among...