216 matches found
[SECURITY] [DSA 1732-1] New squid3 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1732 [email protected] http://www.debian.org/security/ Steffen Joeris March 03, 2009 http://www.debian.org/security/faq -...
SuSE Security Summary SUSE-SR:2009:005
The remote host is missing updates announced in advisory SUSE-SR:2009:005. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
Mandrake Security Advisory MDVSA-2009:034 (squid)
The remote host is missing an update to squid announced via advisory MDVSA-2009:034. OpenVAS Vulnerability Test $Id: mdksa2009034.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:034 squid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Fedora Core 9 FEDORA-2009-1517 (squid)
The remote host is missing an update to squid announced via advisory FEDORA-2009-1517. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 10 FEDORA-2009-1526 (squid)
The remote host is missing an update to squid announced via advisory FEDORA-2009-1526. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Mandrake Security Advisory MDVSA-2009:034 (squid)
The remote host is missing an update to squid announced via advisory MDVSA-2009:034. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Fedora Core 9 FEDORA-2009-1517 (squid)
The remote host is missing an update to squid announced via advisory FEDORA-2009-1517. OpenVAS Vulnerability Test $Id: fcore20091517.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1517 squid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 10 FEDORA-2009-1526 (squid)
The remote host is missing an update to squid announced via advisory FEDORA-2009-1526. OpenVAS Vulnerability Test $Id: fcore20091526.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1526 squid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Squid < 3.1 5 HTTP Version Number Parsing Denial of Service Exploit
Exploit for multiple platform in category dos / poc =================================================================== Squid ; chomp$vulnserverip; @maliciousversion="9.9"...
Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service
!usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 https://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any responsibility for any damages...
CVE-2009-0478
creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8021...
CVE-2009-0478
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in 1 HttpMsg.c and 2 HttpStatusLine.c...
CVE-2009-0478
CVE-2009-0478 affects Squid versions 2.7 through 3.1.0.4, where an HTTP request with an invalid version number can trigger a denial of service via an assertion in HttpMsg.c or HttpStatusLine.c. Connected advisories confirm vendor patches: e.g., Debian/etch-sid fix squid3 3.0.STABLE8-3; Fedora ope...
Gentoo Security Advisory GLSA 200703-10 (kdelibs)
The remote host is missing updates announced in advisory GLSA 200703-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0478
CVE-2008-0478 affects SetCMS 3.6.5 with a directory traversal flaw in index.php. The vulnerability arises from including locally stored files via a crafted set parameter, enabling arbitrary code execution when a PHP sequence is injected into files/enter.set and then included by index.php. The att...
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...
Cross site scripting
The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...
CVE-2007-0537
CVE-2007-0537 affects KDE kdelibs (used by Konqueror 3.5.5); the vulnerability arises from improper parsing of HTML comments, enabling remote XSS and bypassing some protections by embedding certain tags within a comment in a title tag. Documented in multiple advisories (Mandrake/MDKSA, RHSA, Open...
CVE-2007-0478
CVE-2007-0478 affects Apple Mac OS X 10.3.9/10.4.10 as used by Safari. WebCore parses HTML comments in TITLE elements incorrectly, allowing remote attackers to bypass some XSS protections and embed certain HTML tags within a comment to trigger cross-site scripting. The vulnerability is documented...
CVE-2006-0478
CRE Loaded 6.15 is affected by CVE-2006-0478, where remote attackers can perform privileged actions—including uploading and creating arbitrary files—by sending a direct request to files.php. The vulnerability’s root cause is described through the vendor’s note that a patch exists to close the iss...