21 matches found
EUVD-2022-5044
Malicious code in bioql PyPI...
GHSA-QWGM-MXM4-3Q2C net-ldap has weak salt when generating passwords
The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...
CVE-2014-0083
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
CVE-2014-0083
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
Design/Logic Flaw
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
CVE-2014-0083
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
CVE-2014-0083
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
CVE-2014-0083
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
CVE-2014-0083: Use of Password Hash With Insufficient Computational Effort
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
PT-2019-7036
Name of the Vulnerable Software and Affected Versions net-ldap gem versions prior to 0.16.2 Description The issue concerns the generation of SSHA passwords using a weak salt in the Ruby net-ldap gem. Recommendations For versions prior to 0.16.2, update to version 0.16.2 or later to resolve the...
Denial Of Service (DoS)
freeradius is vulnerable to denial of service DoS attacks. The vulnerability exists as a stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to...
CVE-2014-2015
Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...
CVE-2014-2015
Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...
Stack overflow
Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...
CVE-2014-2015
Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...
CVE-2014-2015
CVE-2014-2015 details a stack-based buffer overflow in the FreeRADIUS rlm_pap module's normify function. Affected: FreeRADIUS 2.x (including 2.2.3 and earlier) and 3.x (including 3.0.1 and earlier). Impact per sources: crash and possibly arbitrary code execution via a long SSHA password hash, wit...
CVE-2014-2015
Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...
Mandriva Linux Security Advisory : freeradius (MDVSA-2014:058)
Updated freeradius package fixes security vulnerability : SSHA processing in freeradius before 2.2.3 runs into a stack-based buffer overflow in the freeradius rlmpap module if the password source uses an unusually long hashed password CVE-2014-2015. %NASLMINLEVEL 70300 C Tenable Network Security,...
Updated freeradius package fixes security vulnerability
SSHA processing in freeradius before 2.2.3 runs into a stack-based buffer overflow in the freeradius rlmpap module if the password source uses an unusually long hashed password CVE-2014-2015...
CVE-2014-2015
Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...