199 matches found
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...
CVE-2008-1238
Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely ...
CVE-2008-1238
CVE-2008-1238 affects Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9. The vulnerability arises when generating the HTTP Referer header: if the URL contains Basic Authentication credentials without a username, the Referer header may not include the full URL, potentially allowing remote...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...
Mozilla Foundation Security Advisory 2008-16
Mozilla Foundation Security Advisory 2008-16 Title: HTTP Referrer spoofing with malformed URLs Impact: Moderate Announced: March 25, 2008 Reporter: Gregory Fleischer, RSnake Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.13 SeaMonkey 1.1.9 Description Security researcher Gregory Fleischer...
Debian Security Advisory DSA 1238-1 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 1238-1. Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-6406 Hendrik Weimer discovered that...
CVE-2007-1238
Microsoft Office 2003 is affected by CVE-2007-1238 where a user-assisted remote attacker can cause an application crash (DoS) by attempting to insert a corrupted WMF file. The root cause is the handling of malformed WMF content, leading to denial of service in affected Office components. The avai...
Debian DSA-1238-1 : clamav - several vulnerabilities
Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6406 Hendrik Weimer discovered that invalid characters in base64 encoded data may lead to bypass of scanning...
CVE-2000-1238
The CVE-2000-1238 entry affects BEA Systems WebLogic Express and WebLogic Server 5.1 SP1–SP6. The issue allows remote attackers to bypass access controls for restricted JSP/servlet pages by using a URL that contains multiple forward slash characters before the restricted pages. Vulnerable compone...
CVE-2003-1238
Cross-site scripting vulnerability XSS in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the 1 Team, 2 News, and 3 Liens modules...
CVE-2003-1238
CVE-2003-1238 is a cross-site scripting (XSS) vulnerability in Nuked-Klan 1.3 beta and earlier. The flaw allows remote attackers to steal authentication cookies by injecting arbitrary HTML or script into the op parameter of the Team, News, and Liens modules. Affected component is the web applicat...
CVE-2005-1238
CVE-2005-1238 affects the built-in FTP server for IBM iSeries AS/400 systems. The root cause is failure to enforce a restricted document root, enabling an attacker to read or write arbitrary files, including sensitive QSYS databases, by sending a full pathname in a GET or PUT request. Impact per ...
CVE-2004-1238
This CVE-2004-1238 entry is rejected and does not represent an active vulnerability.
CVE-2002-1238
Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / slash characters such as http://www.example.com///file/...
CVE-2002-1238
CVE-2002-1238 affects Peter Sandvik’s Simple Web Server (version 0.5.1 and earlier). The issue arises from improper handling of malformed URLs with multiple slashes, allowing remote attackers to bypass access restrictions and disclose restricted files. The impact is remote file disclosure; the se...
CVE-2001-1238
Task Manager in Windows 2000 cannot end certain processes with uppercase names (e.g., winlogon.exe, csrss.exe, smss.exe, services.exe) via the Process tab. This could allow local users to install Trojan horses that cannot be stopped with Task Manager. Documents do not provide a fix or patch; PT-S...
CVE-1999-1238
CVE-1999-1238 refers to a vulnerability in the CORE-DIAG fileset within the HP-UX HP message catalog, affecting HP-UX 9.05 and earlier. The issue enables local users to gain privileges due to the vulnerability in the CORE-DIAG fileset. Public details in the connected documents confirm the affecte...