Debian DSA-888-1 : openssl - cryptographic weakness

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...

Debian DSA-1182-1 : gnutls11 - cryptographic weakness

Daniel Bleichenbacher discovered a flaw in GNU TLS cryptographic package that could allow an attacker to generate a forged signature that GNU TLS will accept as valid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian DSA-1174-1 : openssl096 - cryptographic weakness

Daniel Bleichenbacher discovered a flaw in the OpenSSL cryptographic package that could allow an attacker to generate a forged signature that OpenSSL will accept as valid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

[SECURITY] [DSA 1182-1] New gnutls11 packages fix RSA signature forgery cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 1182-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 22nd, 2006 http://www.debian.org/security/faq -...

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution source: https://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script...

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution

source: https://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of the affected application and load...

[SECURITY] [DSA 1174-1] New openssl096 packages fix RSA signature forgery cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 1174-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 11th, 2006 http://www.debian.org/security/faq -...

DSA-1174-1 openssl096 - cryptographic weakness

Bulletin has no description...

DSA-1173-1 openssl - cryptographic weakness

Bulletin has no description...

Joomla! < 1.0.11 administrator/index.php Input Weakness

The version of Joomla! installed on the remote host is affected by an input weakness flaw in the administrator/index.php script due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to impact confidentiality, integrity, or availability. No other...

Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security

source: https://www.securityfocus.com/bid/19661/info Apache HTTP server is prone to a security weakness related to HTTP request headers. An attacker may exploit this issue to steal cookie-based authentication credentials and launch other attacks. var req:LoadVars=new LoadVars;...

Apache 1.3.352.0.582.2.2 - Arbitrary HTTP Request Headers Security

Apache 1.3.352.0.582.2.2 - Arbitrary HTTP Request Headers Security source: https://www.securityfocus.com/bid/19661/info Apache HTTP server is prone to a security weakness related to HTTP request headers. An attacker may exploit this issue to steal cookie-based authentication credentials and launc...

PSWD.JS - Insecure Password Hash

PSWD.JS - Insecure Password Hash / source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers...

PSWD.JS - Insecure Password Hash

/ source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers to use precomputed password hash...

CentOS 4 : pam (CESA-2005:805)

An updated pam package that fixes a security weakness is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. PAM Pluggable Authentication Modules is a system security tool that allows system administrators t...

[SA19480] Opera SSL Certificate &quot;Stealing&quot; Weakness

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Crack MSSQL HASH password-vulnerability warning-the black bar safety net

Original name :Microsoft SQL Server Passwords Cracking the password hashes Original address :http://www.ngssoftware.com/papers/cracking-sql-passwords.pdf Author :David Litchfield [email protected] Term : FreeXploiT Author : ALLyeSNO Date : 2005-3-25 Translation:ALLyeSNO [email protected]...

[SA20277] Tor Weakness and Multiple Vulnerabilities

TITLE: Tor Weakness and Multiple Vulnerabilities SECUNIA ADVISORY ID: SA20277 VERIFY ADVISORY: http://secunia.com/advisories/20277/ CRITICAL: Moderately critical IMPACT: WHERE: From remote SOFTWARE: Tor 0.1.0.x http://secunia.com/product/5269/ DESCRIPTION: Some vulnerabilities and a weakness have...

[Full-disclosure] rPSA-2006-0080-1 postgresql postgresql-server

rPath Security Advisory: 2006-0080-1 Published: 2006-05-24 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Local System User Deterministic Vulnerability Updated Versions: postgresql=/conary.rpath.com@rpl:devel//1/8.1.4-1-0.1...

Microsoft Windows - Path Conversion

Microsoft Windows - Path Conversion source: https://www.securityfocus.com/bid/17934/info Microsoft Windows is susceptible to a path-conversion weakness that may allow attackers to bypass security applications. This issue occurs because the operating system uses multiple differing algorithms to...