CVE-2005-0809

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme fixed byte reordering to protect the key, which allows remote attackers to obtain the key via a brute force attack...

Encrypt all passwords stored on the file system

Passwords are not encrypted in confluence-mail.cfg.xml nor in confluence.cfg.xml; they should be. Resolve an encryption scheme for anything requiring security stored on the file system...

[Full-Disclosure] Mozilla Security Advisory 2004-07-08

Mozilla Security Advisory July 7, 2004 Summary: Windows shell: scheme exposed in Mozilla Products: Mozilla Suite Mozilla Firefox Mozilla Thunderbird Fixed in: Mozilla Suite 1.7.1 Mozilla Firefox 0.9.2 Mozilla Thunderbird 0.7.2 Description: Windows versions of Mozilla products pass URIs using the...

HP-UX fails to apply standard UNIX filesystem security measures when using OnLineJFS

Overview A vulnerability in OnlineJFS could allow an intruder to gain greater access than expected. Description OnlineJFS "provides the online management of the Journaled File System JFS, a high-integrity, highly available file system supported by HP-UX." According to Hewlett-Packard, there is a...

ProtWare HTML Guardian 6.x - Encryption

ProtWare HTML Guardian 6.x - Encryption source: https://www.securityfocus.com/bid/7169/info A weakness has been reported in the encryption scheme used by ProtWare HTML Guardian. Specifically, the encryption scheme implemented obfuscates data using a simple bit shifting technique, making it trivia...

Weak Encryption Scheme in Telindus 112x

----------------------------------------------------------------------- Product Name: TELINDUS ADSL ROUTER 112x Severity : Low Risk Remote : No Category : Trivial encryption scheme can reveal router system password Exploit : No Vendor URL : http://www.telindus.com Author : Elia Florio Discov.-Dat...

ICQ and MSIE allow execution of arbitrary code

Outline qoute I was about to put on a home page right after I discovered it and still had a hope that I will be that one who will finally destroy the world :: /quote Well i dont know if it will destroy the world, but sure enough it's enough to destory a small portion off it : Actually i found the...

Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification

Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification source: https://www.securityfocus.com/bid/5239/info ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension...

Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification

source: https://www.securityfocus.com/bid/5239/info ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension. Reportedly, it is possible for a remote party to modify sound settings in IC...

Telindus 1100 Series Router - Administration Password Leak

// source: https://www.securityfocus.com/bid/4946/info The 1100 series routers are a broadband connectivity solution distributed by Telindus. Under some circumstances, a vulnerable Telindus router may leak sensitive information. When an attempt to connect to the router is made using the...

CVE-1999-1158

Buffer overflow in 1 pluggable authentication module PAM on Solaris 2.5.1 and 2.5 and 2 unixscheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd...

DNS implementations vulnerable to denial-of-service attacks via malformed DNS queries

Overview Incorrect decoding of malformed DNS packets causes certain DNS implementations to hang or crash. Description RFC1035 DOMAIN NAMES, IMPLEMENTATION AND SPECIFICATION defines a mechanism for conserving bytes in a DNS query or reply packet by avoiding repetition of character strings "labels"...

@stake Advisory: PalmOS Password Retrieval and Decoding (A092600-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: PalmOS Password Retrieval and Decoding A092600-1 Release Date: 09/26/2000 Application: PalmOS 3.5.2 and below Platform: All PalmOS Platform Devices Severity: Moderate. Passwords can easily ...

NetcPlus SmartServer3 3.75 - Weak Encryption

NetcPlus SmartServer3 3.75 - Weak Encryption / source: https://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access ...

CVE-2000-0714

The CVE-2000-0714 issue concerns umb-scheme 3.2-11 for Red Hat Linux, which is installed with world-writable files. This local-access vulnerability arises from permissions allowing modification of files by any user, potentially compromising integrity and confidentiality of affected components. Th...

CVE-2000-0714

umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files...

CVE-2000-0714: Undefined Security Weakness

umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files...

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption // source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called...

CVE-1999-0028: Undefined Security Weakness

root privileges via buffer overflow in login/scheme command on SGI IRIX systems...

PT-1997-1012 · Sgi · Sgi Irix

Name of the Vulnerable Software and Affected Versions: SGI IRIX affected versions not specified Description: The issue allows for root privileges to be obtained via a buffer overflow in the login/scheme command on SGI IRIX systems. Recommendations: At the moment, there is no information about a...