204 matches found
CVE-2006-1280
CGI::Session 4.03-1 does not set proper permissions on temporary files created in 1 Driver::File and 2 Driver::dbfile, which allows local users to obtain privileged information, such as session keys, by viewing the files...
SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension
Overview SSL/TLS implementations that respond distinctively to an incorrect PKCS 1 v1.5 encoded SSL/TLS version number expose the premaster secret to a modified Bleichenbacher attack. An attacker could decrypt a given SSL/TLS session or forge a signature on behalf of a vulnerable application's...
CVE-1999-0143
Technical details (affected software/versions, root cause, impact) are not publicly provided in the connected documents; monitor for updates.
PT-1996-1031 · Mit · Kerberos 4
Name of the Vulnerable Software and Affected Versions: Kerberos 4 affected versions not specified Description: The issue allows a user to masquerade as another by breaking and generating session keys. Recommendations: At the moment, there is no information about a newer version that contains a fi...