Fedora Update for curl FEDORA-2014-4436

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : curl-7.29.0-13.fc19 (2014-1864)

re-use of wrong HTTP NTLM connection in libcurl CVE-2014-0015 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for curl FEDORA-2014-1864

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : curl (SSA:2014-044-01)

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2014-044-01. The text itse...

Debian DSA-2849-1 : curl - information disclosure

Paras Sethia discovered that libcurl, a client-side URL transfer library, would sometimes mix up multiple HTTP and HTTPS connections with NTLM authentication to the same server, sending requests for one user over the connection authenticated as a different user. %NASLMINLEVEL 70300 C Tenable...

SuSE 11.2 / 11.3 Security Update : curl (SAT Patch Numbers 8796 / 8797)

This update fixes the re-use of wrong HTTP NTLM connections in libcurl. CVE-2014-0015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVE...

CVE-2014-0015

The CVE-2014-0015 issue affects curl/libcurl 7.10.6–7.34.0, where NTLM connections are reused when multiple authentication methods are enabled, potentially allowing a context-dependent attacker to authenticate as another user via a request. The F5 advisory family (e.g., K15862) mirrors this vulne...

SuSE 11.2 / 11.3 Security Update : curl (SAT Patch Numbers 8796 / 8797)

This update fixes the re-use of wrong HTTP NTLM connections in libcurl. CVE-2014-0015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

[SECURITY] [DSA 2849-1] curl security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2849-1 [email protected] http://www.debian.org/security/ Florian Weimer January 31, 2014 http://www.debian.org/security/faq -...

RedHat Update for openssl RHSA-2014:0015-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2014:0015-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for openssl CESA-2014:0015 centos6

Check for the Version of openssl OpenVAS Vulnerability Test CentOS Update for openssl CESA-2014:0015 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for openssl CESA-2014:0015 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : openssl (ELSA-2014-0015)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0015 advisory. - fix CVE-2013-4353 - Invalid TLS handshake crash - fix CVE-2013-6450 - possible MiTM attack on DTLS1 Tenable has extracted the preceding description...

Microsoft Internet Explorer Shift JIS字符信息泄露漏洞(CVE-2013-0015) (ms13-009)

BUGTRAQ ID: 57822 CVECAN ID: CVE-2013-0015 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Shift JIS是日本语的字符编码。Internet Explorer 6, 7, 8, 9没有正确执行Shift JIS编码的自动选择，通过构造触发跨域滚动事件的特制网站，远程攻击者可从不同的域或区域读取内容，造成信息泄露。 0 Microsoft Internet Explorer 6 - 9 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 将互联网和局域网安全区域设置为“高”...

CVE-2013-0015

Microsoft Internet Explorer 6–9 suffer from a vulnerability in automatic Shift JIS encoding selection, enabling remote attackers to read content from a different domain/zone via a crafted site that triggers cross-domain scrolling events (Shift JIS Character Encoding Vulnerability). This issue cau...

Internet Explorer Shift JIS Character Encoding (MS13-009; CVE-2013-0015)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Microsoft Internet Explorer Shift JIS Character CVE-2013-0015 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 6, 7, 8, and 9 are vulnerable. Technologies Affected Avaya Aura Conferencing 6.0 Avaya...

Microsoft .NET Framework and Microsoft Silverlight RCE Vulnerabilities (2651026)

This host is missing a critical security update according to Microsoft Bulletin MS12-016. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-0015

CVE-2012-0015 is tied to Microsoft .NET Framework 2.0 SP2 and 3.5.1 and describes a heap corruption vulnerability caused by improper calculation of a buffer length. This allows remote code execution via crafted input in XBAPs, ASP.NET applications, or .NET Framework applications. The connected Op...

Microsoft .NET Heap Corruption Code Execution (MS12-016; CVE-2012-0015)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to improper calculation of buffer length while processing specially crafted input. A remote attacker may exploit this issue by enticing a target user to open a specially crafted web...