CWE-330 Archives - CVE Vulnerability

CVE-2008-5162

Sun, 26 Feb 2023 09:10:53 +0000

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function’s return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.

The post CVE-2008-5162 appeared first on CVE Vulnerability.

CVE-2008-4929

Sun, 26 Feb 2023 09:10:47 +0000

MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames.

The post CVE-2008-4929 appeared first on CVE Vulnerability.

CVE-2008-3612

Sun, 26 Feb 2023 09:10:06 +0000

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.

The post CVE-2008-3612 appeared first on CVE Vulnerability.

CVE-2008-2433

Sun, 26 Feb 2023 09:09:30 +0000

The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks. NOTE: this can be leveraged for code execution through an unspecified “manipulation of the configuration.”

The post CVE-2008-2433 appeared first on CVE Vulnerability.

CVE-2008-2020

Sun, 26 Feb 2023 09:09:18 +0000

The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux 2.3, (5) e107 0.7.11, (6) WebZE 0.5.9, (7) Open Media Collectors Database (aka OpenDb) 1.5.0b4, and (8) Labgab 1.1 uses a code_bg.jpg background image and the PHP ImageString function in a way that produces an insufficient number of different images, which allows remote attackers to pass the CAPTCHA test via an automated attack using a table of all possible image checksums and their corresponding digit strings.

The post CVE-2008-2020 appeared first on CVE Vulnerability.

CVE-2008-0141

Sun, 26 Feb 2023 09:08:24 +0000

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action.

The post CVE-2008-0141 appeared first on CVE Vulnerability.

CVE-2008-0087

Sun, 26 Feb 2023 09:08:22 +0000

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.

The post CVE-2008-0087 appeared first on CVE Vulnerability.

CVE-2018-20025

Sun, 26 Feb 2023 06:48:26 +0000

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.

The post CVE-2018-20025 appeared first on CVE Vulnerability.

CVE-2018-19983

Sun, 26 Feb 2023 06:48:23 +0000

An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program (e.g., Z-Wave PC Controller, OpenZWave, CC1110, etc.). Next, the attacker conducts a DoS attack against the Z-Wave S0 Security version product by continuously sending divided “Nonce Get (0x98 0x81)” frames. The reason for dividing the “Nonce Get” frame is that, in security version S0, when a node receives a “Nonce Get” frame, the node produces a random new nonce and sends it to the Src node of the received “Nonce Get” frame. After the nonce value is generated and transmitted, the node transitions to wait mode. At this time, when “Nonce Get” is received again, the node discards the previous nonce value and generates a random nonce again. Therefore, because the frame is encrypted with previous nonce value, the received normal frame cannot be decrypted.

The post CVE-2018-19983 appeared first on CVE Vulnerability.

CVE-2018-19441

Sun, 26 Feb 2023 06:48:09 +0000

An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers for robot secret_key values used for local and cloud authentication/authorization. If an attacker knows the serial number and is able to estimate the time of first provisioning of a robot, he is able to brute force the generated secret_key of the robot. This is because the entropy of the secret_key exclusively relies on these two values, due to not seeding the random generator and using several constant inputs for secret_key computation. Serial numbers are printed on the packaging and equal the MAC address of the robot.

The post CVE-2018-19441 appeared first on CVE Vulnerability.