[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for xulrunner which fixed the following security problems: CVE-2010-1211 Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of...

CentOS Security Advisory CESA-2009:1209 (curl)

The remote host is missing updates to curl announced in advisory CESA-2009:1209. CESA-2009:1209 64665 4 $Id: ovcesa20091209.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1209 curl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1209

W3C Amaya Web Browser 11.1 is affected by a stack-based buffer overflow triggered by a script tag with a long defer attribute, enabling remote arbitrary code execution. The issue is documented in CVE-2009-1209; publicly available details confirm the vulnerability in Amaya 11.1 and describe exploi...

CVE-2009-1209

creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8314 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8321 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9330...

CVE-2008-1209

CVE-2008-1209 documents a cross-site scripting (XSS) vulnerability in redirect.do within Xitex WebContent M1 . The issue arises from the sid parameter, enabling remote attackers to inject arbitrary web script or HTML. This is the stated impact and vector as described in the CVE records; exploitat...

Debian Security Advisory DSA 1209-2 (trac)

The remote host is missing an update to trac announced via advisory DSA 1209-2. The Trac update in DSA 1209 introduced a regression. This update corrects this flaw. For completeness, the original advisory text below: It was discovered that Trac, a wiki and issue tracking system for software...

Debian: Security Advisory (DSA-1209)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Security Bulletin MS07-021 Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178)

Microsoft Security Bulletin MS07-021 Vulnerabilities in CSRSS Could Allow Remote Code Execution 930178 Published: April 10, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

CVE-2007-1209

CVE-2007-1209 is a local privilege-escalation vulnerability in the Windows CSRSS subsystem (Vista) caused by improper marshaling of system resources during process startup/shutdown, allowing a locally authenticated user to gain elevated privileges by manipulating ApiPort connections. Public refer...

Microsoft Windows Vista CSRSS privilege escalation vulnerability

Overview The Microsoft Windows Client/Server Run-time Subsystem CSRSS process fails to properly handle error messages. This vulnerability may allow an attacker to execute arbitrary code. Description The Microsoft Client/Server Run-time Subsystem CSRSS is an essential subsystem. CSRSS is responsib...

Debian DSA-1209-2 : trac - cross-site request forgery

It was discovered that Trac, a wiki and issue tracking system for software development projects, performs insufficient validation against cross-site request forgery, which might lead to an attacker being able to perform manipulation of a Trac site with the privileges of the attacked Trac user...

CVE-2006-1209

The CVE concerns PHP Advanced Transfer Manager (versions 1.00–1.30). The root cause is insufficient access control that stores sensitive data (including password hashes) under the web root. This enables remote attackers to retrieve password hashes by directly requesting a users/[USERNAME] file. C...

CVE-2003-1209

The vulnerability CVE-2003-1209 affects Monkey HTTP Daemon prior to 0.6.2. A POST request without a Content-Type header can cause the server to crash, resulting in a denial of service. The description and connected records confirm the affected product (Monkey HTTP Daemon) and the root cause (like...

CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

CVE-2004-1209

CVE-2004-1209 affects Verisign Payflow Link. When run with empty Accepted URL fields, it does not properly verify the data in the hidden AMOUNT field, enabling remote attackers to modify purchase prices. Documents indicate impact on integrity (partial) with network attack vector and no confidenti...

CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

CVE-2003-1209

The PostMethod function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service crash via a POST request without a Content-Type header...

CVE-2002-1209

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...

CVE-2002-1209

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...

CVE-2002-1209

CVE-2002-1209 – SolarWinds TFTP Server is affected (v5.0.55 and possibly earlier). A directory traversal flaw allows remote attackers to read arbitrary files via dot-dot backslash sequences in a GET request. The vulnerability targets the TFTP service’s file path handling and can expose confidenti...