Dan Kaminsky

The issue concerns the Linux kernel's IPv4 and IPv6 implementations, which use a modified MD4 algorithm. This makes it easier for remote attackers to disrupt networking or hijack network sessions by predicting sequence numbers and Fragment Identification values and sending crafted packets. Additionally, multiple vulnerabilities in the ext4dev-kmp-trace package of SUSE Linux Enterprise may lead to a disruption of protected information availability, exploitable remotely.

The issue is caused by an integer overflow in the libtheora component. This can be triggered by a video with large dimensions, potentially leading to a denial of service (application crash) or possibly allowing the execution of arbitrary code.

A spoofing issue exists in the CryptoAPI component when handling X.509 certificates. This issue allows man-in-the-middle attackers to impersonate arbitrary SSL servers via a crafted certificate. The problem arises from the improper handling of a '0' character in a domain name in the subject's Common Name field of an X.509 certificate.

The issue is related to an integer overflow in the CryptoAPI component when parsing X.509 certificates with malformed ASN.1 Object Identifiers. This allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via a certificate issued by a legitimate Certification Authority. An attacker could impersonate another user or system by exploiting this vulnerability.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.14 Description: The issue is related to the improper implementation of certain dialogs associated with the `pkcs11.addmodule` and `pkcs11.deletemodule` operations. This makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module. Recommendations: For versions prior to 3.0.14, update to version 3.0.14 or later to resolve the issue.

The issue arises from improper handling of a '0' character in a domain name within the subject's Common Name (CN) field of an X.509 certificate. This allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

The issue is related to a heap-based buffer overflow in the SPF dns resolv lookup function in Spf dns resolv.c. This allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field. The vulnerability can be exploited remotely and may lead to disruption of confidentiality, integrity, and availability of protected information.

The issue involves multiple unspecified vulnerabilities in the libvorbis package, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely, potentially causing a denial of service or allowing the execution of arbitrary code. The estimated number of potentially affected devices worldwide is not available.

The issue allows remote attackers to potentially spoof certificates by exploiting MD2 design flaws to generate a hash collision in less than brute-force time. This could lead to violations of confidentiality, integrity, and availability of protected information. The scope of this issue is currently limited due to the large amount of computation required.