[SA17242] YIFF Sound Systems Arbitrary File Playback Weakness

TITLE: YIFF Sound Systems Arbitrary File Playback Weakness SECUNIA ADVISORY ID: SA17242 VERIFY ADVISORY: http://secunia.com/advisories/17242/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: YIFF Sound Systems 2.x http://secunia.com/product/5945/ DESCRIPTION: Javier...

USN-204-1: SSL library vulnerability

Yutaka Oiwa discovered a possible cryptographic weakness in OpenSSL applications. Applications using the OpenSSL library can use the SSLOPMSIESSLV2RSAPADDING option or SSLOPALL, which implies the former to maintain compatibility with third party products, which is achieved by working around known...

OpenSSL SSL 2.0 rollback (weak cryptography)

Active man-in-the-middle attacker can force rollback to SSL 2.0 protocol with known cryptographic weakness for both client and server if SSLOPMSIESSLV2RSAPADDING or SSLOPALL configuration option is enabled...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...

Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access

source: https://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit latent vulnerabilities. An attacker can bypass acce...

[SA16422] Bloodshed Dev-Pascal NULL Character File Display Weakness

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16398] PHP Designer 2005 NULL Character File Display Weakness

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

nCipher Cryptographic Hardware Interface Library cryptographic weakness

On process forking random bytes cache is not clearing, leading to same pseudorandom sequence is generated with few child processes...

CVE-2001-1517

CVE-2001-1517 affects Windows 2000 RunAs (runas.exe). The issue is that cleartext authentication data is stored in memory, potentially allowing a attacker to recover usernames and passwords by a process sharing the same memory page after a RunAs operation ends. Evidence in connected sources confi...

CVE-2002-1668

HP-UX 11.11 and earlier allows local users to cause a denial of service kernel deadlock, due to a "file system weakness" that is possibly via an mmap system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file...

CVE-2002-1668

The vulnerability CVE-2002-1668 affects HP-UX 11.11 and earlier. It allows local users to trigger a denial of service (kernel deadlock) via a file-system weakness potentially exploited by mmap() and performing I/O using data from the mapped buffer on the mapped file descriptor. The available sour...

CVE-2004-2135

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...

Remote Desktop Protocol Server Man-in-the-Middle Weakness

The remote version of the Remote Desktop Protocol Server Terminal Service is vulnerable to a man-in-the-middle MiTM attack. The RDP client makes no effort to validate the identity of the server when setting up encryption. An attacker with the ability to intercept traffic from the RDP server can...

[EXPL] Linux Cryptoloop Watermark Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Mac OS X < 10.4 pty Permission Weakness

The remote host is running a version of Mac OS X which is older than version 10.4. Versions older than 10.4 contain a security issue in the way they handle the permissions of pseudo terminals. When an application uses a new pseudo terminal, it can not restrict its permissions to a safe mode. As a...

[Full-disclosure] D-Link DSL routers authentication bypass

====================== SUMMARY ======================== Title: D-Link DSL routers authentication bypass Date: 19 May 2005 Author: Francesco Orro francesco.orro 4t akhela.com Product: DSL-502T, DSL-504T, DSL-562T, DSL-G604T Vendor: D-Link Vendor URL: http://www.dlink.com Vendor Status: D-Link was...

CVE-2004-1851

Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing...

Oracle Database 9i/10g Fine Grained Auditing (FGA) SELECT Statement Logging Weakness

The remote host is running a version of Oracle Database that, according to its version number, suffers from a flaw in which Fine Grained Auditing FGA becomes disabled when the user SYS runs a SELECT statement. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

[SA15038] netMailshar Professional Two Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...

DameWare NT Utilities Authentication Credentials Persistence Weakness

According to its version number, the copy of DameWare NT Utilities installed on the remote host allows a local user to recover authentication credentials because it stores sensitive information such as username, password, remote user, and remote hostname in memory as plaintext. C Tenable Network...