103 matches found
Mandriva Update for openldap MDVSA-2011:056 (openldap)
Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2011:056 openldap Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openldap, openldap2.3 vulnerabilities (USN-1100-1)
It was discovered that OpenLDAP did not properly check forwarded authentication failures when using a slave server and chain overlay. If OpenLDAP were configured in this manner, an attacker could bypass authentication checks by sending an invalid password to a slave server. CVE-2011-1024 It was...
USN-1100-1: OpenLDAP vulnerabilities
It was discovered that OpenLDAP did not properly check forwarded authentication failures when using a consumer server and chain overlay. If OpenLDAP were configured in this manner, an attacker could bypass authentication checks by sending an invalid password to a consumer server. CVE-2011-1024 It...
CVE-2011-1025
OpenLDAP 2.4.x with the back-ndb backend is vulnerable to CVE-2011-1025: bind.cpp in back-ndb allows remote attackers to bypass access restrictions by supplying any password when binding as the root DN, without authentication. Affected: OpenLDAP 2.4.x before 2.4.24. Impact: possible unauthorized ...
openldap security update
2.4.19-15.2 - fix: security - DoS when submitting special MODRDN request 680975 2.4.19-15.1 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend...
CVE-2010-1025
Cross-site scripting XSS vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-1025
The provided data identifies CVE-2010-1025 as a Cross-site scripting (XSS) vulnerability in the TYPO3 extension TGM-Newsletter (tgm_newsletter) version 0.0.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics show a MEDIUM severity (...
RHEL 5 : java-1.5.0-sun (RHSA-2008:1025)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1025 advisory. - Java Web Start File Inclusion via System Properties Override CVE-2008-2086 - JavaWebStart allows unauthorized network connections...
Immunity Canvas: PHPLINKADMIN_RFI
Name| phplinkadminrfi ---|--- CVE| CVE-2009-1025 Exploit Pack| CANVAS Description| PHPLinkAdmin Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Beerwin CVE Url: https://vulners.com/cve/CVE-2009-1025 CVE Name: CVE-2009-1025...
CVE-2009-1025
creationtimestamp| type| source ---|---|--- 2009-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8216...
CVE-2008-4787
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
Design/Logic Flaw
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
CVE-2008-4787
CVE-2008-4787 describes a visual truncation/address-bar spoofing issue in Microsoft Internet Explorer 6. The vulnerability occurs when a hostname contains many characters, which render as whitespace, enabling a page to appear at a different address than its actual content. The entry cites MSRC789...
CVE-2008-4787
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
FreeBSD Ports: imlib
The remote host is missing an update to the system as announced in the referenced advisory. VID 2001103a-6bbd-11d9-851d-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: imlib
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Apple Safari WebKit fails to properly handle a crafted URL
Overview A vulnerability in the way Apple Mac OS X handles specially crafted URLs may allow an attacker to execute script in the context of another site.. Description According to Apple Safari 3.1.1: An issue exists in WebKit's handling of URLs containing a colon character in the host name. Openi...
CVE-2008-1025
Cross-site scripting XSS vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion...
CVE-2008-1025
The CVE-2008-1025 entry concerns Apple Safari/WebKit prior to version 3.1.1, where WebKit mishandles URLs with a colon in the hostname, enabling cross-site scripting (XSS). The vulnerability is rooted in WebKit’s URL handling and affects Safari before 3.1.1. Reported impact is that an attacker ca...
