Malwarebytes
OCTOBER 22, 2021
This would mean Network Time Protocol (NTP) servers using the broken GPSD versions would think it’s March 2002 instead of October 2021. Authentication mechanisms such as Time-based One-Time Password (TOTP) and Kerberos also rely heavily on time. The same would happen in cases where authentication relies on cookies.
Security Affairs
MARCH 4, 2022
The following two issues added by CISA to the catalog are very old, they are dated back 2002 and 2004 respectively: CVE-2002-0367 – Microsoft Windows Privilege Escalation Vulnerability: smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator (..)
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
MAY 8, 2024
TunnelVision exploits the vulnerability CVE-2024-3661, which is a DHCP design flaw where messages such as the classless static route (option 121) are not authenticated and for this reason can be manipulated by the attackers. The researchers speculate that the vulnerability existed in DHCP since 2002, when option 121 was implemented.
The State of Security
MAY 5, 2022
In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. It took me maybe 10 attempts. It was, of course, some variation […]… Read More.
Krebs on Security
DECEMBER 18, 2020
7, 2020, the NSA said “Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication.” 3, and said it learned about the flaw from the NSA. ” Indeed, the NSA’s Dec.
Security Boulevard
MAY 5, 2022
In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. It took me maybe 10 attempts. It was, of course, some variation […]… Read More.
eSecurity Planet
DECEMBER 14, 2022
Another key update, Leonard noted, patches CVE-2002-41076 , a critical remote code execution flaw in PowerShell with a CVSS score of 8.5. “Without the patch, an authenticated attacker could escape the PowerShell Session Configuration and run unapproved commands on the target system,” he said.
Expert insights. Personalized for you.
145 
Let's personalize your content