1594 matches found
CVE-2012-3378
The registerapplication function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in...
DEBIAN-CVE-2012-3378
The registerapplication function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
a flaw in the mount handling routine for 64-bit systems that allowed a local user to cause denial of service CVE-2006-7203, Important. a flaw in the PPP over Ethernet implementation that allowed a remote user to cause a denial of service CVE-2007-2525, Important. a flaw in the Bluetooth subsystem...
Scientific Linux Security Update : php on SL5.x i386/x86_64
It was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which are not valid in the locale used by the script. This could allow an attacker to bypass quoting restrictions imposed by escapeshellcmd and execute arbitrary commands if the PHP script was usi...
Scientific Linux Security Update : bash on SL5.x i386/x86_64
Bash is the default shell for Scientific Linux. It was found that certain scripts bundled with the Bash documentation created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary fil...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
These new kernel packages contain fixes for the following security issues : - A flaw was found in the backported stack unwinder fixes in Red Hat Enterprise Linux 5. On AMD64 and Intel 64 platforms, a local user could trigger this flaw and cause a denial of service. CVE-2007-4574, Important - A fl...
Scientific Linux Security Update : php on SL4.x i386/x86_64
It was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which are not valid in the locale used by the script. This could allow an attacker to bypass quoting restrictions imposed by escapeshellcmd and execute arbitrary commands if the PHP script was usi...
Scientific Linux Security Update : kernel on SL4.x i386/x86_64
A flaw was found in the handling of process death signals. This allowed a local user to send arbitrary signals to the suid-process executed by that user. A successful exploitation of this flaw depends on the structure of the suid-program and its signal handling. CVE-2007-3848, Important - A flaw...
Low Entropy RSA Issue in Intel EPSD Baseboard Management Controller (BMC) Firmware
Summary: There is a potential security vulnerability related to the improper generation of RSA encryption keys in EPSD Baseboard Management Controller BMC firmware. Intel is releasing updated versions of the BMC firmware to mitigate the potential vulnerability. Description: There is a potential...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4186)
This kernel update fixes the following security problems : - The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network amplification between two routers. CVE-2007-2242 The default is that RH0 is disabled now. To...
Code injection
as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...
UBUNTU-CVE-2012-0808
as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...
Ubuntu Update for ruby1.8 USN-1377-1
Ubuntu Update for Linux kernel vulnerabilities USN-1377-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13771.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ruby1.8 USN-1377-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
What You Need to Know About the RSA Key Research
It’s always slightly disorienting and confusing when a story about something as esoteric as weak encryption keys produced by poor random number generators makes its way into the real world and begins scaring the citizens. This can lead to confusion and worry about whether everyone’s online bankin...
[20111102] - Core - Password Change
Weak random number generation during password reset leads to possibility of changing a user's password...
[20111103] - Core - Password Change
Weak random number generation during password reset leads to possibility of changing a user's password...
CVE-2011-2190
The generateadminpassword function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack...
CVE-2011-2190
The generateadminpassword function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack...
Ruby Random Number Values Information Disclosure Vulnerability
This host is installed with Ruby and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyrandomnumbervaluesinfodiscvuln.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Random Number Values Information Disclosure Vulnerability Authors: Sooraj KS Copyright:...
Ruby Random Number Generation Local Denial Of Service Vulnerability
This host is installed with Ruby and is prone to local denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyrandomnumbergenerationdosvuln.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Random Number Generation Local Denial Of Service Vulnerability Authors: Sooraj KS Copyrigh...