LMS Web Ensino XSRF / XSS / SQL Injection / Session Fixation

DCA-2011-0003 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - LMS Web Ensino Vendor Product Description - Portuguese - O Learning Management System LMS Web Ensino é uma ferramenta completa para o gerenciamento e oferta de cursos e treinamentos à...

Session fixation

The xfsfsgeometry function in fs/xfs/xfsfsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRYV1 ioctl call...

CVE-2011-0717

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

Session fixation

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0717

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0717

The CVE-2011-0717 issue affects Red Hat Network Satellite Server 5.4 (Spacewalk-related). The root cause is a session fixation flaw where session cookies can be manipulated, enabling an attacker to hijack a user’s session after login. Documented impact includes potential partial disclosure/integr...

PT-2011-2581 · Red Hat · Spacewalk +1

Name of the Vulnerable Software and Affected Versions: Red Hat Network RHN Satellite Server version 5.4 Description: A session fixation issue in Red Hat Network Satellite Server allows remote attackers to hijack web sessions. The issue is related to Spacewalk, but the specific vectors are not...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Updated packages that fix two security issues are now available for Red Hat Network Satellite Server 5.4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Spacewalk: Session fixation flaw

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0584

Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2011-0584

CVE-2011-0584 refers to a session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 . The issue allows remote attackers to hijack web sessions via unspecified vectors, indicating an authentication/session management weakness that persists across affected ColdFusion versions. The vulner...

CVE-2011-0584

Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2010-4499

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2010-4499

CVE-2010-4499 affects the Collaborative Information Manager server (and ActiveCatalog) prior to versions 8.1.0 and 1.0.1, respectively. The issue is a session fixation vulnerability that allows remote attackers to hijack web sessions via unspecified vectors. The provided documents consistently de...

Session fixation

OpenSSL before 0.9.8j, when SSLOPNETSCAPEREUSECIPHERCHANGEBUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a...

Session fixation

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSLOPNETSCAPEREUSECIPHERCHANGEBUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network...