Searching pairs software vulnerabilities

The dissect_attribute_value_pairs function in p

dissect_attribute_value_pairs | packet-radiusc | Ethereal | function |

The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.


The CheckGroup function in openSkat VTMF before

CheckGroup | generates | attackers | determine | messages | function | variable | openSkat | decrypt | private | allows | before | public | remote | prime | pairs | which | might | VTMF | key | "p" | not |

The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages.


The CAPTCHA functionality in php-Nuke 6.0 throu

challenge/response | functionality | php-Nuke | through | CAPTCHA | based | Agent | pairs | fixed | uses | User | only | vary | once | per | day |

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.


Multiple SQL injection vulnerabilities in Invis

vulnerabilities | injection | Invision | Multiple | Board | Power | SQL |

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before Thursday, January 05, 2006 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.


Software vulnerabilities results 1 to 5 of 5     
Page: 1