what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

openid-dns.txt

Posted Aug 8, 2008

Authored by Ben Laurie

Various OpenID Providers (OPs) have TLS server certificates that use weak keys as a result of the Debian predictable random number generator vulnerability.

tags | advisory

systems | linux, debian

advisories | CVE-2008-3280, CVE-2008-0166, CVE-2008-1447

SHA-256 | 4ddd04a36c9b48f9c80e6563aa1fa71fc5a92fd3361f08a3b4f6e658063a2112

Download | Favorite | View

Related Files

Mod_Auth_OpenID Session Stealing

Posted May 23, 2012

Authored by Peter Ellehauge

mod_auth_openid versions prior to 0.7 insecurely store session ids in /tmp/mod_auth_openid.db unencrypted.

tags | exploit

advisories | CVE-2012-2760

SHA-256 | 38e86ab74026a3ed1cc80b4676aa4ecb3b7863107daed098dea57ce009b8de2c

Download | Favorite | View