CVE-2015-8331: Improper Input Validation

The Operation and Maintenance Unit OMU in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID...

PT-2015-7686

Name of the Vulnerable Software and Affected Versions NTP versions 4.2.8p5 and earlier NTP versions 4.3.x before 4.3.90 Description The issue allows man-in-the-middle attackers to conduct replay attacks by sniffing the network when NTP is configured in broadcast mode. Recommendations For NTP...

Security Advisory - Replay Attack Vulnerability of Users Abnormal Exit in VCN500

The operation and maintenance unit OMU of Huawei VCN500 Video Cloud Node does not process users’ abnormal exit properly in a specific scenario, which leaves the user’s session ID still valid. An attacker may exploit this vulnerability to launch replay attacks. Vulnerability ID: HWPSIRT-2015-07042...

IBM OpenAFS Information Disclosure Vulnerability (CNVD-2015-07373)

IBM OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. An information disclosure vulnerability exists in IBM OpenAFS, which allows a remote attacker to obtain the plaintext portion of an encrypted packet by performing a replay...

IBM OpenAFS Information Disclosure Vulnerability (CNVD-2015-07372)

IBM OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. An information disclosure vulnerability exists in IBM OpenAFS, which allows a remote attacker to perform a replay attack on the original recipient and view the ACK response...

CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

DEBIAN-CVE-2015-7762

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7762

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

Code injection

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

Code injection

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

UBUNTU-CVE-2015-7762

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

UBUNTU-CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7763: Exposure of Sensitive Information to an Unauthorized Actor

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7762: Exposure of Sensitive Information to an Unauthorized Actor

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

PT-2015-7594

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.5.75 through 1.5.78 OpenAFS versions 1.6.x before 1.6.15 OpenAFS versions 1.7.x before 1.7.33 Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the networ...

PT-2015-7593

Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.15 OpenAFS versions 1.7.x prior to 1.7.33 Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network due to improper initialization of the...

PT-2015-2296

Name of the Vulnerable Software and Affected Versions Heimdal versions prior to 10.11 Description The issue is related to inadequate access control in the Heimdal component of the Mac OS X operating system. It allows a remote attacker to conduct replay attacks against the SMB server by exploiting...

CVE-2015-5913: Improper Access Control

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...