Searching knowing software vulnerabilities

The encrypted loop device in Linux kernel 2.4.1

encrypted | kernel | device | Linux | loop |

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.


Secure Elements Class 5 AVR client (aka C5 EVM)

Elements | client | Secure | Class | AVR |

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.


The do_set_password function in modules/chanser

modules/chanserv/setc | do_set_password | Services | function | before | IRC |

The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.


Software vulnerabilities results 1 to 4 of 4     
Page: 1