6417 matches found
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openssl-blacklist update (USN-612-11)
USN-612-3 addressed a weakness in OpenSSL certificate and key generation and introduced openssl-blacklist to aid in detecting vulnerable certificates and keys. This update adds RSA-4096 blacklists to the openssl-blacklist-extra package and adjusts openssl-vulnkey to properly handle RSA-4096 and...
Play a game of webshell game-bug warning-the black bar safety net
To hack the x-Files cast a draft, two months, and haven't selected, and now it sends to the Just look at it, the article is bad, Don't laugh,the picture is zoom out, tap the picture you can see the big picture. Play a game of webshell game The desert（baiker2008 Now many of the side dishes, speaki...
USN-612-11: openssl-blacklist update
USN-612-3 addressed a weakness in OpenSSL certificate and key generation and introduced openssl-blacklist to aid in detecting vulnerable certificates and keys. This update adds RSA-4096 blocklists to the openssl-blacklist-extra package and adjusts openssl-vulnkey to properly handle RSA-4096 and...
Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)
USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...
USN-612-10: OpenVPN regression
USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...
USN-612-9: openssl-blacklist update
USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by introducing openssl-blacklist to aid in detecting vulnerable private keys. This update enhances the openssl-vulnkey tool to check Certificate Signing Requests, accept input from STDIN, and check moduli without ...
CVE-2008-2570: Undefined Security Weakness
Multiple unspecified vulnerabilities in LimeSurvey formerly PHPSurveyor before 1.71 have unknown impact and attack vectors...
CVE-2008-2550: Undefined Security Weakness
Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header...
OtomiGenX v2.2 Ultimate Authentication bypass Vulnerability
...::::: OtomiGenX v2.2 Ultimate Authentication bypass Vulnerabilities ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my be...
LokiCMS Multiple Vulnerabilities through Authorization weakness
Title: LokiCMS Multiple Vulnerabilities through Authorization weakness Vendor: http://www.lokicms.com Bugs: Arbitrary File Overwrite,Code Injection,File Inclusion,Retrieve Admin's Hash Vulnerable Version: LokiCMS 0.3.4 prior versions also may be affected Exploitation: Remote with browser Impact:...
perl-Crypt-CBC weaker encryption with some ciphers
Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...
Debian OpenSSH/OpenSSL Package Random Number Generator Weakness (SSL check)
The remote x509 certificate on the remote SSL server has been generated on a Debian or Ubuntu system which contains a bug in the random number generator of its OpenSSL library. The problem is due to a Debian packager removing nearly all sources of entropy in the remote version of OpenSSL. An...
Debian and Ubuntu OpenSSL packages contain a predictable random number generator
Overview A vulnerability in the OpenSSL package included with the Debian GNU/Linux operating system and its derivatives may cause weak cryptographic keys to be generated. Description A weakness exists in the random number generator used by the OpenSSL package included with the Debian GNU/Linux...
USN-612-6: OpenVPN regression
USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...
Debian OpenSSH/OpenSSL Package Random Number Generator Weakness
The remote SSH host key has been generated on a Debian or Ubuntu system which contains a bug in the random number generator of its OpenSSL library. The problem is due to a Debian packager removing nearly all sources of entropy in the remote version of OpenSSL. An attacker can easily obtain the...
[USN-612-1] OpenSSL vulnerability
=========================================================== Ubuntu Security Notice USN-612-1 May 13, 2008 openssl vulnerability CVE-2008-0166 =========================================================== A weakness has been discovered in the random number generator used by OpenSSL on Debian and...
CVE-2008-2174: Undefined Security Weakness
Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 have unknown impact and attack vectors, related to "various areas where security was missing."...
Microsoft Internet Explorer 2 - UTF-7 HTTP Response Handling
Microsoft Internet Explorer 2 - UTF-7 HTTP Response Handling source: https://www.securityfocus.com/bid/29112/info Microsoft Internet Explorer is prone to a weakness that can facilitate cross-site scripting attacks. The issue occurs because the application fails to sufficiently sanitize...
PT-2008-3624 · Php +1 · Php +1
Name of the Vulnerable Software and Affected Versions: PHP versions 4.x through 4.4.7 PHP versions 5.x through 5.2.4 Description: The issue arises from the GENERATE SEED macro, which, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion...