CVE-2015-0842

The yubiserver one-time password authentication server is vulnerable to SQL injection issues in versions prior to 0.6 . This vulnerability could potentially lead to an authentication bypass . While specific exploit code or a direct patch version is not detailed in the provided documents, the flaw...

CVE-2015-0843

The yubiserver one-time password authentication server is vulnerable to buffer overflows in versions prior to 0.6 . This issue is caused by the misuse of the sprintf function , which fails to properly check the size of the input before copying it. No specific exploit details or remediation steps ...