Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2012-0639

WebKit in Apple iTunes before 10.6 is affected by CVE-2012-0639. The vulnerability enables MITM attackers to execute arbitrary code or cause memory corruption/DoS via iTunes Store browsing vectors. The description does not specify affected versions beyond “before 10.6” or root cause details beyon...

CVE-2012-0639

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1...

SuSE 11.1 Security Update : squid (SAT Patch Number 5584)

This update fixes the following security issue : - 587375: squid NULL deref via HTCP request CVE-2010-0639 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...

Fedora Update for squid FEDORA-2010-14236

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : squid-3.1.0.16-6.fc12 (2010-3064)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Mandriva Update for squid MDVSA-2010:060 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDVSA-2010:060 squid Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for squid FEDORA-2010-3064

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-0639

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets to the HTCP port...

CVE-2010-0639

CVE-2010-0639 affects Squid where the function htcpHandleTstRequest in htcp.c (and htcp.cc for 3.0) can be triggered by crafting HTCP packets to the HTCP port, causing a NULL pointer dereference and a daemon crash (DoS). It affects Squid 2.x prior to 2.6.STABLE24 and 2.7 prior to 2.7.STABLE8, and...

Mandriva Update for openoffice.org-voikko MDVA-2010:060 (openoffice.org-voikko)

Check for the Version of openoffice.org-voikko OpenVAS Vulnerability Test Mandriva Update for openoffice.org-voikko MDVA-2010:060 openoffice.org-voikko Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

CVE-2010-0639

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets to the HTCP port...

CVE-2009-0639

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter...

CVE-2009-0639

CVE-2009-0639 is a PHP remote file inclusion vulnerability affecting phpyabs 0.1.2, specifically in moduli/libri/index.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the Azione parameter. Public references (e.g., SecurityFocus BID 33670, Exploit-DB 8005)...

CVE-2009-0639

creationtimestamp| type| source ---|---|--- 2009-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8005...

FreeBSD Ports: xli

The remote host is missing an update to the system as announced in the referenced advisory. VID bfbbd505-3bd6-409c-8c67-445d3635cf4b OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: xli

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell客户端nwspool.dll EnumPrinters RPC请求远程栈溢出漏洞

BUGTRAQ ID: 27741 CVECAN ID: CVE-2008-0639 Novell Client是允许NetWare连接到Windows的工作站软件。 Novell Client的Spooler服务（nwspool.dll）负责处理通过spoolss命名管道所提交的RPC请求，该DLL所暴露的EnumPrinters函数存在逻辑错误，允许远程攻击者通过提交恶意的RPC请求触发栈溢出，导致执行任意指令。 出现这个漏洞是由于没有正确地修复CVE-2007-6701漏洞。 Novell Client 4.91 SP4 Novell Client 4.91 SP3 Novell...