DEBIAN-CVE-2014-0487

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors...

CVE-2014-0487

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors...

CVE-2014-0487

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors...

CVE-2014-0487

CVE-2014-0487 affects APT prior to 1.0.9. The issue is that APT does not verify downloaded files if they have been modified as indicated by the If-Modified-Since header, with unspecified impact and attack vectors. CVSSv2 base score 7.5 (HIGH) from NVD, but the provided documents do not specify co...

F5 Networks BIG-IP : Multiple MySQL vulnerabilities (K14410)

For BIG-IP systems using the MySQL database, the following MySQL vulnerabilities may allow local users to gain knowledge of sensitive information, manipulate certain data, or cause a Denial of Service DoS:CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112...

Debian DSA-3025-1 : apt - security update

It was discovered that APT, the high level package manager, does not properly invalidate unauthenticated data CVE-2014-0488 , performs incorrect verification of 304 replies CVE-2014-0487 , does not perform the checksum check when the Acquire::GzipIndexes option is used CVE-2014-0489 and does not...

Ubuntu: Security Advisory (USN-2348-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 53-1] apt security update

Package : apt Version : 0.8.10.3+squeeze3 CVE ID : CVE-2014-0487 CVE-2014-0488 CVE-2014-0489 It was discovered that APT, the high level package manager, does not properly invalidate unauthenticated data CVE-2014-0488, performs incorrect verification of 304 replies CVE-2014-0487 and does not perfo...

[SECURITY] [DSA 3025-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3025-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3025-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3025-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 16, 2014 http://www.debian.org/security/faq -...

USN-2348-1: APT vulnerabilities

It was discovered that APT did not re-verify downloaded files when the If-Modified-Since wasn't met. CVE-2014-0487 It was discovered that APT did not invalidate repository data when it switched from an unauthenticated to an authenticated state. CVE-2014-0488 It was discovered that the APT...

CVE-2014-0487

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors...

IBM Lotus Domino Multiple Vulnerabilities

IBM Lotus Domino is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino"; if...

CVE-2013-0487

Summary of CVE-2013-0487 (IBM Domino Java Console) : The vulnerability affects IBM Lotus Domino 8.5.x where the Java Console can allow remote authenticated users to hijack temporary credentials by exploiting configuration details (SPR KLYH8TNNDN). The NVD entry lists a high impact (CVSSv2 8.5) wi...

CVE-2013-0487

The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN...

Fedora Update for mysql FEDORA-2012-0987

Check for the Version of mysql OpenVAS Vulnerability Test Fedora Update for mysql FEDORA-2012-0987 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2012-0487

CVE-2012-0487 refers to an unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.5.x. The issue allows remote authenticated users to affect availability via unknown vectors and is listed among related CVEs (e.g., CVE-2012-0117, CVE-2012-0486, CVE-2012-0488, etc.). No concrete ...

CVE-2011-0487

The CVE-2011-0487 issue affects ICQ 7 where the update mechanism does not verify update authenticity, enabling a man-in-the-middle attacker to deliver a crafted file via the automatic-update channel and achieve arbitrary code execution. Public sources in the connected documents consistently descr...

CVE-2010-0487

CVE-2010-0487 describes a remote code execution vulnerability in Windows Cabinet File Viewer (cabview.dll) where the Authenticode signature verification omits certain fields from the digest for cabinet files. Affected: Cabinet File Viewer Shell Extension (cabview.dll) versions 5.1, 6.0, 6.1 on Wi...

Microsoft Windows Cabinet File Viewer Cabview验证远程代码执行漏洞（MS10-019）

BUGTRAQ ID: 39332 CVE ID: CVE-2010-0487 Windows Cabinet File Viewer（cabview.dll）用于查看、打开、浏览和解压cabinet文件和档案。 Windows Cabinet File Viewer在签名和验证cabinet文件时忽略了文件digest的一些字段。匿名攻击者可以通过修改已有的签名cabinet文件以便将签名文件的未验证部分指向恶意代码然后诱骗用户打开或查看特制的cabinet文件来利用此漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Cabinet File Viewer...