974 matches found
[Full-disclosure] Session data pollution vulnerabilities in web applications
In web applications I've tested recently I have stumbled upon something that seems to be new class of bugs. Quick googling did not turn up any reference to this kind of vulnerabilities, so I thought I should describe it. The problem boils down to the application reusing the same session variable...
CVE-2001-1505
The CVE-2001-1505 entry covers tinc versions 1.0pre3 and 1.0pre4, where remote attackers can inject data into user sessions by sniffing and replaying packets. Affected component: tinc (specific versions cited). Underlying issue: packet sniffing/replay enables session data modification (integrity ...
cubecart206.txt
Hello All, I have discovered a number of remote vulnerabilities in: CubeCart 2.0.6. Authors Site: http://www.cubecart.com CubeCart is described by its authors as: 'What is CubeCart? CubeCart is an eCommerce script written with PHP & MySQL. With CubeCart you can setup a powerful online store as lo...
Fedora Core 3 : ruby-1.8.1-7.FC3.1 (2004-403)
Thu Nov 11 2004 Akira TAGOH - 1.8.1-7.FC3.1 - security fix CVE-2004-0983 - security fix CVE-2004-0755 - ruby-1.8.1-cgi-dos.patch: applied to fix a denial of service issue. 138366 - ruby-1.8.1-cgisessionperms.patch: sets the permission of the session data file to 0600. 130063 - Sat Oct 30 2004...
silc question - insecure memory
Good Evening, while screwing around tonight checking memory for the SSH2 advisory. I noticed passphrase and complete sessions from silc in memory. I dont know if this is normal for silc I wouldnt think it would be but all you need to do it is: cdowns@Vader:$ sudo dd if=/dev/mem...
CVE-2002-1746
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets...
CVE-2002-0863
Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...
EUVD-2002-0855
Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...
CVE-2002-0863
Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...
Microsoft Internet Explorer vulnerable to DoS via crafted ftp:// URL
Overview Microsoft Internet Explorer has a vulnerability that may cause the program to crash when opening some FTP URL's. Description Microsoft Internet Explorer with Browsing Enhancements installed by default on some versions of Windows may crash when opening an FTP URL containing '' or '&'...
Memory leak in WinSSH
Session data is not released after session is over...
RealServer 5.0/6.0/7.0 - Memory Contents Disclosure
source : https://www.securityfocus.com/bid/1957/info RealServer is a popular streaming audio and video server from Real Networks. A vulnerability exists in all versions of RealServer 7 and below that could allow a remote attacker to gain administrative rights and access to server information and...