CVE-2008-2107

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

PT-2008-3624 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 4.x through 4.4.7 PHP versions 5.x through 5.2.4 Description: The issue arises from the GENERATE SEED macro, which, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion...

DEBIAN-CVE-2008-1637

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...

Improper access control

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...

CVE-2008-1637

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...

Unfixed XSS vulnerability at frh.utn.edu.ar

Security researcher SeeD, has submitted on 30/03/2008 a cross-site-scripting XSS vulnerability affecting frh.utn.edu.ar, which at the time of submission ranked 9183 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2008. It is currently...

Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PunBB Blind Password Recovery Vulnerability Release Date: 2008/02/20 Last Modified: 2008/02/20 Author: Stefan Esser stefan.esseratsektioneins.de Application: PunBB = 1.2.16 Severity...

Debian Security Advisory DSA 956-1 (lsh-utils)

The remote host is missing an update to lsh-utils announced via advisory DSA 956-1. Stefan Pfetzing discovered that lshd, a Secure Shell v2 SSH2 protocol server, leaks a couple of file descriptors, related to the randomness generator, to user shells which are started by lshd. A local attacker can...

Unfixed XSS vulnerability at myplay-games.org

Security researcher SeeD, has submitted on 26/12/2007 a cross-site-scripting XSS vulnerability affecting myplay-games.org, which at the time of submission ranked 1199397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currentl...

Unfixed XSS vulnerability at www.disccrs.org

Security researcher SeeD, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.disccrs.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currently...

Unfixed XSS vulnerability at www-gap.dcs.st-and.ac.uk

Security researcher SeeD, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www-gap.dcs.st-and.ac.uk, which at the time of submission ranked 14140 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Unfixed XSS vulnerability at www.tenavat.net

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.tenavat.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/12/2007. It is currently...

Unfixed XSS vulnerability at www.sf-monheim.de

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.sf-monheim.de, which at the time of submission ranked 6154280 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2007. It is current...

Unfixed XSS vulnerability at doebeln-fan.de

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting doebeln-fan.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is currently unfixe...

Unfixed XSS vulnerability at www.lilke.de

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.lilke.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.sosmath.com

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.sosmath.com, which at the time of submission ranked 46535 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

Unfixed XSS vulnerability at www.web-catalog.kiev.ua

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.web-catalog.kiev.ua, which at the time of submission ranked 8683403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Unfixed XSS vulnerability at www.ingmarweber.de

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.ingmarweber.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2007. It is currently...

Unfixed XSS vulnerability at skfactor.com

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting skfactor.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.appleisp.com

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.appleisp.com, which at the time of submission ranked 10025675 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is current...