SSH connections using RC4 and password authentication can be replayed

Overview This vulnerability may allow an attacker to replay a captured SSH1 session. Description Preconditions: Client requests RC4 and the server grants request Client uses password authentication When an SSH1 session using the RC4 cipher is established, the client and server agree upon a sessio...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

CVE-1999-0151

CVE-1999-0151 corresponds to the SATAN tool vulnerability where the session key can be disclosed if the user navigates the browser to other sites, potentially enabling root access. Connected sources confirm the issue affects SATAN and describe the risk of session key disclosure leading to elevate...

CVE-1999-0151

The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access...

CVE-1999-0143

Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys...

CVE-1999-0143

Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys...

CVE-1999-0151

The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access...

PT-1995-1006 · Satan · Satan

Name of the Vulnerable Software and Affected Versions: SATAN affected versions not specified Description: The issue allows the SATAN session key to be disclosed when the user navigates to other sites using their web browser, potentially enabling root access. Recommendations: At the moment, there ...