PHP 4.x/5.0 - 'Strip_Tags()' Function Bypass

source: https://www.securityfocus.com/bid/10724/info It is reported that it is possible to bypass PHPs striptags function. It is reported that under certain circumstances, PHPs striptags function will improperly leave malformed tags in place. This vulnerability may mean that previously...

CVE-2001-0597

The CVE-2001-0597 entry concerns Zetetic Secure Tool for Recalling Important Passwords (STRIP) for PalmOS (0.5 and earlier). The vulnerability arises from STRIP using SysRandom seeded by TimeGetTicks, coupled with an implementation flaw that greatly reduces the password search space, enabling a l...

CVE-2001-0597: Undefined Security Weakness

Zetetic Secure Tool for Recalling Important Passwords STRIP 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly...

Catastrophic failure of Strip password generation.

Executive summary: If you have ever used Strip for the Palm to generate your passwords, change them. Change them NOW. Strip Secure Tool for Recalling Important Passwords is a nice encrypted password notebook for the Palm; see http://www.zetetic.net/products.html for details. Strip-0.5 also featur...