Mandriva Linux Security Advisory : python-feedparser (MDVSA-2011:082)

Multiple vulnerabilities has been found and corrected in python-feedparser : Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested...

CVE-2011-1156

feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...

CVE-2011-1156

feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...

CVE-2011-1156

feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...

CVE-2011-1156

CVE-2011-1156 concerns the Python feedparser (Universal Feed Parser) project. The vulnerability exists in feedparser.py (python-feedparser) prior to version 5.0.1, where a malformed DOCTYPE declaration can be exploited remotely to cause an application crash, i.e., a denial of service. The initial...

openSUSE Security Update : irssi (openSUSE-SU-2010:0183-1)

irssi did not check the identity information of a remote hosts's certificate. Attackers could exploit that for a man-in-the-middle attack CVE-2010-1155. irssi could crash if someone changed nick while the victim was leaving the channel CVE-2010-1156. %NASLMINLEVEL 70300 C Tenable Network Security...

openSUSE Security Update : irssi (openSUSE-SU-2010:0183-1)

irssi did not check the identity information of a remote hosts's certificate. Attackers could exploit that for a man-in-the-middle attack CVE-2010-1155. irssi could crash if someone changed nick while the victim was leaving the channel CVE-2010-1156. %NASLMINLEVEL 70300 C Tenable Network Security...

openSUSE Security Update : irssi (openSUSE-SU-2010:0183-1)

irssi did not check the identity information of a remote hosts's certificate. Attackers could exploit that for a man-in-the-middle attack CVE-2010-1155. irssi could crash if someone changed nick while the victim was leaving the channel CVE-2010-1156. %NASLMINLEVEL 70300 C Tenable Network Security...

Ubuntu: Security Advisory (USN-929-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] irssi

New irssi packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/irssi-0.8.15-i486-1slack13.0.txz: Upgraded. From the NEWS file: - Check if an SSL certificate...

FreeBSD Ports: irssi

The remote host is missing an update to the system as announced in the referenced advisory. VID 3b7967f1-49e8-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3b7967f1-49e8-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : irssi regression (USN-929-2)

USN-929-1 fixed vulnerabilities in irssi. The upstream changes introduced a regression when using irssi with SSL and an IRC proxy. This update fixes the problem. We apologize for the inconvenience. It was discovered that irssi did not perform certificate host validation when using SSL connections...

Mandriva Update for irssi MDVSA-2010:079 (irssi)

Check for the Version of irssi OpenVAS Vulnerability Test Mandriva Update for irssi MDVSA-2010:079 irssi Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[USN-929-1] irssi vulnerabilities

=========================================================== Ubuntu Security Notice USN-929-1 April 16, 2010 irssi vulnerabilities CVE-2010-1155, CVE-2010-1156 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu...

CVE-2010-1156

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel...

CVE-2010-1156

The CVE-2010-1156 issue affects Irssi prior to 0.8.15 in core/nicklist.c, where a fuzzy nick-match during channel-leave can trigger a NULL pointer dereference and crash (denial of service). CVE-2010-1155 relates to improper SSL host-name verification, enabling potential MITM via arbitrary certifi...

Ubuntu Update for irssi vulnerabilities USN-929-1

Ubuntu Update for Linux kernel vulnerabilities USN-929-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9291.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for irssi vulnerabilities USN-929-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-929-1: irssi vulnerabilities

It was discovered that irssi did not perform certificate host validation when using SSL connections. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2010-1155 Aurelien Delaitre discovered that irssi could be...

CVE-2010-1156

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel...