Gentoo Security Advisory GLSA 200807-06 (apache)

The remote host is missing updates announced in advisory GLSA 200807-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1678

Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server modssl that specify...

CVE-2008-1678

CVE-2008-1678 describes a memory leak in OpenSSL 0.9.8f–0.9.8h in libssl/ zlib_stateful_init used during SSL handshakes with compression, enabling a remote attacker to exhaust memory and cause DoS. Connected Nessus advisories reference this CVE as a fixed/unpatched issue in affected deployments (...

Debian Security Advisory DSA 1207-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1207-1. Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-3621...

Debian: Security Advisory (DSA-1207-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1678

Cross-site scripting XSS vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler...

[SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1207-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1207-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 9th, 2006 http://www.debian.org/security/faq -...

XSS vulnerabilities

PMASA-2006-1 Announcement-ID: PMASA-2006-1 Date: 2006-04-06 Summary XSS vulnerabilities Description It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory. We wish to thank Toni Koivunen/CERT-FI for this advisory. Severity We consider these...

CVE-2002-1678

The CVE-2002-1678 entry describes a Cross-site scripting (XSS) vulnerability in Jelsoft’s vBulletin 2.0 rc2 through 2.2.4, specifically in memberlist.php, allowing remote attackers to steal authentication credentials by injecting a/script into $letterbits. Affected software is Jelsoft vBulletin 2...

CVE-2005-1678

CVE-2005-1678 affects Groove Virtual Office prior to 3.1 build 2338, prior to 3.1a build 2364, and Groove Workspace prior to 2.5n build 1871. The vulnerability arises from improper display of file extensions on attached or embedded files in a compound document, which may allow remote attackers to...

KLA10185 Multiple vulnerabilities in Groove

Multiple serious vulnerabilities have been found in Groove products. Malicious users can exploit these vulnerabilities to obtain sensitive information, inject web scripts, bypass security restrictions and spoof filenames. Below is a complete list of vulnerabilities 1. Improper file extension...

CVE-2004-1678

CVE-2004-1678 describes a directory traversal vulnerability in PerlDesk’s pdesk.cgi. A remote attacker can read portions of arbitrary files (and possibly trigger execution of Perl modules) by crafting lang parameters with ‘..’ sequences terminated by a NULL character (%00), potentially leaking fi...

CVE-2004-1678

Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 null character in the lang parameter, which can leak portions of the requested files if a...