Ubuntu 11.04 : mozvoikko, ubufox, webfav update (USN-1157-2)

USN-1157-1 fixed vulnerabilities in Firefox. This update provides updated packages for use with Firefox 5. Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory...

Moderate: Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update

JBoss Enterprise Web Server 1.0.2 is now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

Mandriva Update for python-feedparser MDVSA-2011:082 (python-feedparser)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : python-feedparser (openSUSE-SU-2011:0314-1)

Various issues in python-feedparser have been fixed, including fixes for crashes due to missing input sanitizaion and a XSS vulnerability. CVE-2011-1156, CVE-2011-1157, CVE-2011-1158 and CVE-2009-5065 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora Update for python-feedparser FEDORA-2011-4911

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for python-feedparser FEDORA-2011-4894

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : python-feedparser (MDVSA-2011:082)

Multiple vulnerabilities has been found and corrected in python-feedparser : Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested...

CVE-2011-1157

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...

CVE-2011-1157

CVE-2011-1157 affects Universal Feed Parser (python-feedparser) 5.x up to version 5.0.0, where feedparser.py is vulnerable to cross-site scripting (XSS) via malformed XML comments. An attacker could inject arbitrary web script or HTML through crafted XML comments sent to the parser. Version 5.0.1...

Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities

Binary data 5786.pasl...

Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities

Binary data 5788.pasl...

HP-UX Update for Apache Running Tomcat Servlet Engine HPSBUX02579

Check for the Version of Apache Running Tomcat Servlet Engine OpenVAS Vulnerability Test HP-UX Update for Apache Running Tomcat Servlet Engine HPSBUX02579 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

HP-UX Update for Apache Running Tomcat Servlet Engine HPSBUX02579

The remote host is missing an update for the Apache Running Tomcat Servlet Engine packages announced via the referenced advisory. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7099)

This update of tomcat fixes denial of service and information disclosure vulnerabilities which could potentially be exploited by remote attackers to crash tomcat or to obtain sensitive information. CVE-2010-2227 / CVE-2010-1157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

openSUSE Security Update : tomcat6 (openSUSE-SU-2010:0616-1)

This update of tomcat fixes denial of service and information disclosure vulnerabilities which could potentially be exploited by remote attackers to crash tomcat or to obtain sensitive information CVE-2010-2227, CVE-2010-1157. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : tomcat6 (openSUSE-SU-2010:0616-1)

This update of tomcat fixes denial of service and information disclosure vulnerabilities which could potentially be exploited by remote attackers to crash tomcat or to obtain sensitive information CVE-2010-2227, CVE-2010-1157. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE9 Security Update : Tomcat (YOU Patch Number 12625)

This update of tomcat fixes a denial of service vulnerability and two information disclosure flaws which could potentially be exploited by remote attackers to crash tomcat or to obtain sensitive information. CVE-2010-2227, CVE-2010-1157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

Important: Red Hat Security Advisory: jbossweb security update

An updated jbossweb package that fixes two security issues is now available for JBoss Enterprise Application Platform 4.2 and 4.3 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

Fixed in Apache Tomcat 6.0.28

Important: Remote Denial Of Service and Information Disclosure Vulnerability CVE-2010-2227 Several flaws in the handling of the 'Transfer-Encoding' header were found that prevented the recycling of a buffer. A remote attacker could trigger this flaw which would cause subsequent requests to fail...

CVE-2010-1157

CVE-2010-1157 affects Apache Tomcat 5.5.0–5.5.29 and 6.0.0–6.0.26. The vulnerability allows an attacker to disclose the server’s hostname or IP by sending a request for a resource that requires BASIC or DIGEST authentication and then reading the realm field in the WWW-Authenticate header. The pro...