126 matches found
Debian DSA-1748-1 : libsoup - integer overflow
It was discovered that libsoup, an HTTP library implementation in C, handles large strings insecurely via its Base64 encoding functions. This could possibly lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
[SECURITY] [DSA 1748-1] New libsoup packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1748-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...
RedHat Security Advisory RHSA-2009:0344
The remote host is missing updates announced in advisory RHSA-2009:0344. libsoup is an HTTP client/library implementation for GNOME written in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into...
Ubuntu USN-735-1 (gst-plugins-base0.10)
The remote host is missing an update to gst-plugins-base0.10 announced via advisory USN-735-1. OpenVAS Vulnerability Test $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-735-1...
RedHat Security Advisory RHSA-2009:0344
The remote host is missing updates announced in advisory RHSA-2009:0344. libsoup is an HTTP client/library implementation for GNOME written in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into...
Ubuntu USN-737-1 (libsoup)
The remote host is missing an update to libsoup announced via advisory USN-737-1. OpenVAS Vulnerability Test $Id: ubuntu7371.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7371.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-737-1 libsoup Authors: Thomas...
libsoup security update
2.2.98-2.el5.1 - Add patch for RH bug 488030 CVE-2009-0585, soupbase64encode...
CVE-2009-0585
CVE-2009-0585 : An integer overflow in libsoup’s soup_base64_encode (soup-misc.c) affects libsoup 2.x before 2.2.x and before 2.24 on 2.x, allowing context-dependent attackers to execute arbitrary code via a long input string converted to Base64. Public disclosures reference multiple advisories (...
Gentoo Security Advisory GLSA 200503-10 (Firefox)
The remote host is missing updates announced in advisory GLSA 200503-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0585
The CVE affects IBM AIX 5.2 and 5.3, specifically the sysmgt.websm.webaccess component, where WebSM Remote Client files have world-writable permissions. This permits local users to alter the behavior of the client by overwriting those files. The issue is rooted in overly permissive file permissio...
CVE-2007-0585
CVE-2007-0585 concerns Webfwlog before 0.92: when register_globals is on, remote attackers can request conffile parameters via include/debug.php to obtain source code of files, with potential directory traversal implications. The connected documents corroborate the description but do not provide ...
CVE-2007-0585
include/debug.php in Webfwlog 0.92 and earlier, when registerglobals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct...
CVE-2006-0585
jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service application crash via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null...
CVE-2006-0585
CVE-2006-0585 affects jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier. A remote attacker can cause a denial of service (application crash) by embedding a Shockwave Flash object that contains ActionScript code calling VBScript, which then calls Javascript’s document.write, triggerin...
CVE-2006-0585
jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service application crash via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null...
CVE-2005-0585
CVE-2005-0585 affects Firefox <1.0.1 and Mozilla
CVE-2004-0585
CVE-2004-0585 is rejected/not used; refer to CVE-2004-0589 instead.
CVE-2002-0585
Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service...
CVE-2002-0585
CVE-2002-0585 affects HP-UX 11.11’s ndd component. The vulnerability is described as allowing a denial of service via certain TRANSPORT patches. Affected software: ndd(1M) on HP-UX 11.11. Root cause/impact: denial of service (as stated). Exploitation details are not provided in the documents. Rem...