CVE-2008-0166 vulnerabilities and exploits

(subscribe to this query)

OpenSSL 0.9.8c-1 up to versions prior to 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote malicious users to conduct brute force guessing attacks against cryptographic keys.

Openssl Openssl Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 6.06 Debian Debian Linux 4.0

3 EDB exploits24 Github repositories

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote malicious users to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.

Ubuntu Linux 7.04 Ubuntu Linux 7.10 Ubuntu Linux 8.04

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166). In combination with the DNS Cache Poisoning issue (CVE-2008-1447) and the fact that almost all SSL/TLS ...

Openid Openid -

1 EDB exploit

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 prior to 0.9.8f allows remote malicious users to execute arbitrary code via unspecified vectors.

Openssl Openssl 0.9.8d Openssl Openssl 0.9.8e Openssl Openssl 0.9.8b Openssl Openssl 0.9.8c Openssl Openssl 0.9.8 Openssl Openssl 0.9.8a

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and previous versions does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Openssl Openssl

ssh in OpenSSH prior to 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows malicious users to violate intended policy and gain privileges by causing an X client to be treated as trusted.

Openbsd Openssh 4.3p2 Openbsd Openssh 4.3p1 Openbsd Openssh 4.0 Openbsd Openssh 4.3 Openbsd Openssh 4.2p1 Openbsd Openssh 4.4p1 Openbsd Openssh 4.4 Openbsd Openssh 4.1 Openbsd Openssh 4.0p1 Openbsd Openssh Openbsd Openssh 4.5 Openbsd Openssh 4.2 Openbsd Openssh 4.1p1

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emac...

Openbsd Openssh 4.3p2

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1177 Github repositories28 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook