Описание
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 0.10-6 |
| hardy | ignored | end of life |
| intrepid | released | 0.10-2+lenny1build0.8.10.1 |
| jaunty | ignored | end of life |
| karmic | ignored | end of life |
| lucid | not-affected | 0.10-6 |
| maverick | not-affected | 0.10-6 |
| natty | not-affected | 0.10-6 |
| oneiric | not-affected | 0.10-6 |
Показывать по
Ссылки на источники
6.8 Medium
CVSS2
Связанные уязвимости
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with pr ...
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
6.8 Medium
CVSS2