Patches for Django Framework Fix DoS Vuln

Developers behind the Web framework Django have pushed out a new build that fixes a handful of security issues, including a denial of service vulnerability in the framework’s password hasher. Django 1.4.8, Django 1.5.4, and Django 1.6 beta 4 were released over the weekend and users are urged to...

Debian Security Advisory DSA 2758-1 (python-django - denial of service)

It was discovered that python-django, a high-level Python web develompent framework, is prone to a denial of service vulnerability via large passwords. A non-authenticated remote attacker could mount a denial of service by submitting arbitrarily large passwords, tying up server resources in the...

Ubuntu Update for update-manager USN-1443-2

Ubuntu Update for Linux kernel vulnerabilities USN-1443-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN14432.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for update-manager USN-1443-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu: Security Advisory (USN-1443-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for update-manager USN-1443-1

Ubuntu Update for Linux kernel vulnerabilities USN-1443-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14431.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for update-manager USN-1443-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

CVE-2012-1443

CVE-2012-1443 describes a bypass in the RAR file parser used by multiple antivirus products (e.g., ClamAV 0.96.4-related integrations and several vendors) where a RAR file starting with an MZ character sequence can be analyzed by user-assisted remote attackers to bypass malware detection. The evi...

Google Chrome multiple vulnerabilities - May11 (Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay11win.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome multiple vulnerabilities - May11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networ...

CVE-2011-1443

CVE-2011-1443 affects Google Chrome prior to version 11.0.696.57, where the layered rendering code can expose a denial-of-service or possibly other impact via stale pointers. Public sources in the connected docs confirm the issue as a Chrome layering pointer problem and reference the 11.0.696.57 ...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

OCS Inventory NG is affected in versions before 1.02, with multiple unspecified vulnerabilities in the Server component. The available sources note unknown impact and attack vectors, and there are no explicit root-cause or patch details in the provided connected documents. No exploitation informa...

Gentoo Security Advisory GLSA 200408-07 (horde-imp)

The remote host is missing updates announced in advisory GLSA 200408-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian: Security Advisory (DSA-1443-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1443-1 : tcpreen - buffer overflows

It was discovered that several buffer overflows in tcpreen, a tool for monitoring a TCP connection, may lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1443. The...

CVE-2003-1443

Kaspersky Antivirus (KAV) 4.0.9.0 is affected: it fails to detect viruses in files whose names use MS-DOS device names, allowing local bypass of protection. The issue is demonstrated with aux.vbs and aux.com. The available references confirm the vulnerability exists but do not provide a publicly ...

CVE-2007-1443

CVE-2007-1443 covers multiple reflected cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e, exploitable via the register.php form fields (r_username, r_email, r_password, r_confirmpassword, r_homepage, …, r_timezoneoffset, r_usewysiwyg...

CVE-2006-1443

CVE-2006-1443 affects Apple Mac OS X 10.3.9 and 10.4.6, where an integer underflow in CoreFoundation enables context-dependent code execution via conversions from string to file system representation. The vulnerable components include CFStringGetFileSystemRepresentation and NSFileManager’s getFil...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...