Showing 1 - 5 of 5

Files from Chris Anley

NGS00471.txt: Posted Feb 6, 2007; Authored by Chris Anley | Site ngssoftware.com; Versions of Jetty, the popular java web server, are vulnerable to a session id prediction attack. Jetty uses java.util.Random to generate session ids. The internal state of this generator can be easily discovered, leading to an attacker being able to hijack existing and future sessions. Jetty versions below 4.2.27, 5.1.12, 6.0.2 and 6.1.0pre3 are affected.; tags | advisory, java, web; SHA-256 | c1d988304d1385f3280f2844850635794020da733cf9d0150423c973335069fc; Download | Favorite | View

sybase-ase.txt: Posted Apr 17, 2005; Authored by Mark Litchfield, Chris Anley, Sherief Hammad | Site ngssoftware.com; NGSSoftware Insight Security Research Advisory - Sybase ASE versions prior to 12.5.3 ESD#1 suffer from multiple buffer overflows and denial of service vulnerabilities.; tags | advisory, denial of service, overflow, vulnerability; SHA-256 | 8057a9b0c4794a5ecce8eb94c3a4e21b6ee749420f1666aa849c032a94346f39; Download | Favorite | View

Next Generation Security Advisory 205012005G: Posted Jan 6, 2005; Authored by NGSSoftware, Chris Anley | Site nextgenss.com; NGSSoftware Insight Security Research Advisory #NISR05012005G - IBM DB2 is vulnerable to denial of service conditions when processing certain function calls. Systems Affected: DB2 8.1.; tags | advisory, denial of service; SHA-256 | f3c908713847b92460a5a7d99df17b60b369dd3c656c7cfc290d0f990ee42c85; Download | Favorite | View

Next Generation Security Advisory 205012005F: Posted Jan 6, 2005; Authored by NGSSoftware, Chris Anley | Site nextgenss.com; NGSSoftware Insight Security Research Advisory #NISR05012005F - Almost all shared memory sections and events in the Windows version of DB2 have weak permissions; all sections can be read and written by Everyone, and all events can be set and waited on by Everyone. This results in a number of security issues relating to the privileges of local users. Systems Affected: DB2 8.1.; tags | advisory, local; systems | windows; SHA-256 | 710a1b87f503f48ddd770bd0d5c49acdd7ab71124cf9f67ce6157ca99e17f3fc; Download | Favorite | View

NGSextproc.txt: Posted Jul 28, 2003; Authored by David Litchfield, Chris Anley | Site ngssoftware.com; NGSSoftware Insight Security Research Advisory #NISR25072003 - In an attempt to fix previous vulnerabilities discovered by NGSSoftware, the Oracle RDBMS fix patched the hole but left a logging function vulnerable to a stack overflow.; tags | advisory, overflow, vulnerability; SHA-256 | 237dd712fc93400a7d9eed9e111f3ab5238fd5fcb2322857fa12ec0d69be3187; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days