CVE-2009-0152

CVE-2009-0152 affects iChat on Mac OS X 10.5.x prior to 10.5.7. The issue causes SSL for AOL Instant Messenger (AIM) to be disabled in certain scenarios, potentially exposing AIM conversations to network sniffing. Remediation is to upgrade to Mac OS X 10.5.7 (Security Update 2009-002) which inclu...

PT-2009-2842 · Aol +1 · Aim +1

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.5 through 10.5.6 Description: The issue allows remote attackers to obtain sensitive information by sniffing the network due to the disabling of SSL for AOL Instant Messenger AIM communication in certain circumstance...

Data-sniffing attack costs Heartland $12.6m

From The Register Dan Goodin Electronic payments processor Heartland Payment Systems said Thursday it has allocated $12.6m to cover a security breach that exposed sensitive card holder data crossing its network. More than half that amount involves a fine MasterCard has assessed banks that did...

Design/Logic Flaw

The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2008-6797

The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2008-6797

The CVE-2008-6797 entry concerns Mitel NuPoint Messenger (R11 and R3) where the server sends usernames and passwords in cleartext to Exchange servers, enabling remote attackers to sniff network traffic and obtain sensitive credentials. Red Hat and other sources corroborate the same description. T...

CVE-2008-6564

Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks...

Design/Logic Flaw

Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks...

CVE-2008-6564

Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks...

CVE-2008-6564

The CVE-2008-6564 entry describes a vulnerability in the Nortel UNIStim protocol (used in Communication Server 1000 and related products) where predictable sequence numbers enable session hijacking. This could allow remote attackers to hijack sessions by sniffing traffic or brute-forcing sequence...

CVE-2009-1074

Sun Java System Identity Manager IdM 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs...

Design/Logic Flaw

Sun Java System Identity Manager IdM 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs...

CVE-2009-1074

Sun Java System Identity Manager IdM 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs...

Hackers can sniff keystrokes from thin air

By Elinor Mills, CNET Presenters at the CanSecWest security conference detailed on Thursday how they can sniff data by analyzing keystroke vibrations using a laser trained on a shiny laptop or through electrical signals coming from a PC connected to a PS/2 keyboard and plugged into a socket. Usin...

Group classes(ARP spoofing and sniffing)-exploit warning-the black bar safety net

Article author:╰★og the spirit の porridge Information source: og the spirit clanEvil-Soul Security Team on http://bbs.x-xox-x.com） ARP spoofing is the principle of manipulation of the two hosts in the ARP cache table, in order to change between them in the normal communication direction, such a...

snmp-brute NSE Script

Attempts to find an SNMP community string by brute force guessing. This script opens a sending socket and a sniffing pcap socket in parallel threads. The sending socket sends the SNMP probes with the community strings, while the pcap socket sniffs the network for an answer to the probes. If valid...

Oracle 11g Password Sniffing and Cracking-vulnerability warning-the black bar safety net

It's now possible for us to do sniffing oracle 11g password and cracking at the same time. If the old version of Cain & abel doesn't support oracle 11g , just try the newest version of it , Cain & Abel 4.9.25 . It supports the oracle 11g sniffing and password extractor. The thing that makes it...

Cisco VLAN Trunking Protocol Denial Of Service

/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...

Information disclosure

IBM WebSphere Application Server WAS 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2008-5411

CVE-2008-5411 affects IBM WebSphere Application Server (WAS) 7 before 7.0.0.1, where SSL traffic is sent over unsecured TCP, enabling remote attackers to sniff and obtain sensitive information. Root cause: SSL data transmitted without proper protocol protection. Impact: confidentiality compromise...