bind cryptographically weak query ids

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

CVE-2005-3087

The SecureW2 3.0 TLS implementation uses weak random number generators rand and srand from system time during generation of the pre-master secret PMS, which makes it easier for attackers to guess the secret and decrypt sensitive data...

[Full-disclosure] SecureW2 TLS security problem

Hi everyone! I was looking at the code for a TLS implementation, an open source implementation "SecureW2" by Alfa & Ariss, see: http://www.securew2.com/uk/index.htm I found that it uses weak random numbers when generating the pre-master-secret. The code is in "./Components/Common/release 3/versio...

Weak DameWare encryption

Weak PRNG is used for symmetric key generation, key is self is sent in cleartext among data...

Weaknesses in MIT magic cookie and XDM X Windows authorization

Overview MIT magic cookie and XDM authorization contain vulnerabilities that could allow remote attackers to connect to X displays. Description Two widely used X Window System authorization schemes have weaknesses in their sample implementations. MIT-MAGIC-COOKIE-1 On some systems built without t...

Sharp Zaurus multiple bugs

Remote filesystem access, weak pseudo-random numbers generation...

HERT advisory: FreeBSD IP Spoofing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------- HERT - Hacker Emergency Response Team [email protected] - http://hert.org Advisory: 00003 Title: FreeBSD IP Spoofing Date: 1st October 2000 Summary: IP Spoofing Sequence number predictio...

CVE-2000-0357

CVE-2000-0357 affects ORBit and esound on Red Hat Linux 6.1, where insufficiently random numbers in authentication keys allow local users to guess keys. The CVSS vector (AV:N/AC:L/Au:N/C:P/I:P/A:P) yields a base score of 7.5 (HIGH). The vulnerability impact covers partial confidentiality, integri...