Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:4329260E587A
HistoryNov 07, 2014 - 2:38 a.m.

[SECURITY] Fedora 19 Update: Pound-2.6-8.fc19

2014-11-0702:38:03
lists.fedoraproject.org
16

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

The Pound program is a reverse proxy, load balancer and HTTPS front-end for Web server(s). Pound was developed to enable distributing the load among several Web-servers and to allow for a convenient SSL wrapper for those Web servers that do not offer it natively. Pound is distributed under the GPL - no warranty, it’s free to use, copy and give away

OSVersionArchitecturePackageVersionFilename
Fedora19anypound< 2.6UNKNOWN

Related

nessus 34
openvas 52
fedora 23
osv 6
debian 4
rapid7blog 1
cve 4
veracode 5
f5 5
github 2
cert 3
tomcat 4
ubuntu 2
prion 2
threatpost 1
jvn 1
ibm 27
debiancve 3
ubuntucve 3
checkpoint_security 1
checkpoint_advisories 2
seebug 4
ics 1
mskb 1
securityvulns 3
freebsd 1
redhat 1
hackerone 1
citrix 1
amazon 1
nessus
nessus
Fedora 20 : Pound-2.6-8.fc20 (2014-13777)
2014-11-12 00:00:00
Fedora 19 : Pound-2.6-8.fc19 (2014-13764)
2014-11-07 00:00:00
Debian DLA-400-1 : pound security update (BEAST) (POODLE)
2016-01-25 00:00:00
openvas
openvas
Fedora Update for Pound FEDORA-2014-13777
2014-11-12 00:00:00
Fedora Update for Pound FEDORA-2014-13764
2014-11-07 00:00:00
Debian: Security Advisory (DLA-400-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: Pound-2.6-8.fc20
2014-11-12 02:45:18
[SECURITY] Fedora 15 Update: nss-util-3.13.1-3.fc15
2012-01-22 05:26:28
[SECURITY] Fedora 15 Update: xulrunner-9.0.1-1.fc15
2012-01-22 05:26:29
osv
osv
pound - security update
2016-01-24 00:00:00
pound - security update
2015-05-07 00:00:00
Tomcat Vulnerable to Web Cache Poisoning
2022-05-01 02:04:54
debian
debian
[SECURITY] [DLA 400-1] pound security update
2016-01-24 04:50:54
[SECURITY] [DSA 3253-1] pound security update
2015-05-07 19:39:51
[SECURITY] [DSA 2627-1] nginx security update
2013-02-17 11:14:31
rapid7blog
rapid7blog
New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”
2021-09-01 13:11:33
cve
cve
CVE-2005-2090
2005-07-05 04:00:00
CVE-2012-4929
2012-09-15 18:55:00
CVE-2011-3389
2011-09-06 19:55:00
veracode
veracode
HTTP Request Smuggling
2018-11-13 06:55:19
Information Leakage
2019-01-15 08:58:53
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
f5
f5
K16828 : Apache Tomcat vulnerability CVE-2005-2090
2015-07-02 00:00:00
SOL16828 - Apache Tomcat vulnerability CVE-2005-2090
2015-07-02 00:00:00
SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2012-12-05 00:00:00
github
github
Tomcat Vulnerable to Web Cache Poisoning
2022-05-01 02:04:54
Apache Tomcat is vulnerable to HTTP request-smuggling
2022-05-14 01:10:36
cert
cert
Single crafted HTTP request may result in multiple responses
2005-02-04 00:00:00
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
POODLE vulnerability in SSL 3.0
2014-10-17 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.23, 5.0.SVN
2007-03-09 00:00:00
Fixed in Apache Tomcat 6.0.11
2005-06-30 00:00:00
Fixed in Apache Tomcat 8.0.0-RC3
2013-09-23 00:00:00
ubuntu
ubuntu
Qt vulnerability
2012-11-08 00:00:00
OpenSSL vulnerability
2013-07-04 00:00:00
prion
prion
Design/Logic Flaw
2012-09-15 18:55:00
Session fixation
2011-09-06 19:55:00
threatpost
threatpost
Apple Patches Mass of Security Bugs in OS X and Safari
2013-06-05 09:51:54
jvn
jvn
JVN#65273415: Android OS issue where it is affected by the CRIME attack
2016-07-22 00:00:00
ibm
ibm
Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSSL (CVE-2012-4929)
2020-03-03 19:02:20
Security Bulletin: Vulnerabilities in SSL and TLS protocols affect the IBM FlashSystem V840 (CVE-2011-3389)
2018-06-18 00:09:28
Security Bulletin: IBM System x and Flex Systems Browser Exploit Against SSL/TLS (BEAST) Mitigations (CVE-2011-3389)
2022-05-16 16:03:13
debiancve
debiancve
CVE-2012-4929
2012-09-15 18:55:00
CVE-2011-3389
2011-09-06 19:55:00
CVE-2013-4286
2014-02-26 14:55:00
ubuntucve
ubuntucve
CVE-2012-4929
2012-09-15 00:00:00
CVE-2011-3389
2011-11-16 00:00:00
CVE-2013-4286
2014-02-26 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against SSL and TLS Protocols Information Disclosure (MS12-006; CVE-2011-3389)
2012-01-10 00:00:00
Web Servers SSL Flooding Denial of Service (CVE-2011-3389)
2011-11-06 00:00:00
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
Apache Tomcat 安全限制绕过漏洞
2014-02-26 00:00:00
Apache Tomcat不完整修复信息泄漏漏洞
2014-02-27 00:00:00
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
mskb
mskb
MS12-006: Vulnerability in SSL/TLS could allow information disclosure: January 10, 2012
2012-01-10 00:00:00
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST &#40;Browser Exploit Against SSL/TLS&#41; attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE&#40;r&#41; Micro Edition Suite Security Update for BEAST &#40;Browser Exploit Against SSL/TLS&#41; attacks
2012-10-29 00:00:00
[SECURITY] CVE-2013-4286 Incomplete fix for CVE-2005-2090 &#40;Information disclosure&#41;
2014-02-28 00:00:00
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
redhat
redhat
(RHSA-2015:1546) Important: node.js security update
2015-08-04 00:00:00
hackerone
hackerone
New Relic: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2017-03-26 19:08:23
citrix
citrix
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
2014-10-14 04:00:00
amazon
amazon
Important: openssl
2014-10-14 22:32:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON
Related for FEDORA:4329260E587A
nessus34openvas52fedora23osv6debian4rapid7blog1cve4veracode5f55github2cert3tomcat4ubuntu2prion2threatpost1jvn1ibm27debiancve3ubuntucve3checkpoint_security1checkpoint_advisories2seebug4ics1mskb1securityvulns3freebsd1redhat1hackerone1citrix1amazon1