tigervnc security update

1.0.90-0.15.20110314svn4359.1 - viewer can send password without proper validation of X.509 certs CVE-2011-1775...

CVE-2011-1775

CVE-2011-1775 affects TigerVNC vncviewer (TigerVNC 1.1beta1) where CSecurityTLS::processMsg does not properly validate the server's X.509 certificate, enabling MITM by spoofing a TLS VNC server with an arbitrary cert. Concrete details show the flaw enabling password sending without proper cert va...

Fedora 15 : tigervnc-1.0.90-4.fc15 (2011-6838)

This update fixes following issue : - vncviewer could have sent user password to VNC server without proper validation of the server's X.509 certificate when secure X.509 authentication was requested CVE-2011-1775 Note that Tenable Network Security has extracted the preceding description block...

CVE-2009-1775

Multiple cross-site scripting XSS vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/applications.php, 2 admin/appsgroup.php, 3 admin/users.php, 4 admin/usersgroup.php, and 5 admin/tasks.php; 6 show...

CVE-2009-1775

CVE-2009-1775 affects Ulteo Open Virtual Desktop 1.0. The issue comprises multiple cross-site scripting (XSS) vulnerabilities exploitable via user-controlled parameters on several admin endpoints: id parameter in admin/applications.php, admin/appsgroup.php, admin/users.php, admin/usersgroup.php, ...

Debian Security Advisory DSA 1775-1 (php-json-ext)

The remote host is missing an update to php-json-ext announced via advisory DSA 1775-1. OpenVAS Vulnerability Test $Id: deb17751.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1775-1 php-json-ext Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

CVE-2008-1775

Technical details about CVE-2008-1775 are not publicly provided in the supplied documents; no affected product versions, exploit info, or patch details are present. Monitor for updates.

CVE-2007-1775

CVE-2007-1775 describes an unrestricted file upload vulnerability in the upload.php3 component of JBrowser 2.4 and older. The underlying issue allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors. The available sources state the existence of this vulnerability ...

CVE-2006-1775

Multiple cross-site scripting XSS vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the 1 Site Description field in a adminboard.php, the 2 Group name and 3 Group description fields in b admingroups.php and c groupcp.php, the 4 Theme Name field in d...

CVE-2006-1775

Multiple cross-site scripting XSS vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the 1 Site Description field in a adminboard.php, the 2 Group name and 3 Group description fields in b admingroups.php and c groupcp.php, the 4 Theme Name field in d...

CVE-2006-1775

CVE-2006-1775 affects phpBB 2.0.19 with multiple XSS vulnerabilities. The affected inputs are: (1) Site Description in admin_board.php, (2) Group name and (3) Group description in admin_groups.php and groupcp.php, (4) Theme Name in admin_styles.php, and (5) Rank Title in admin_ranks.php. The note...

CVE-2002-1775

Affected product: Symantec Norton AntiVirus (NAV) 2002. Issue: remote attackers can bypass the initial virus scan by using a non-RFC compliant MIME header, causing NAV to prematurely stop scanning. Root cause/impact: bypass of initial scan with partial impact on security posture; AutoProtect feat...

CVE-2005-1775

CVE-2005-1775 affects Terminator 3: War of the Machines (game) versions 1.16 and earlier. The vulnerability allows remote attackers to trigger a denial-of-service (application crash) by sending a large nickname. Public exploitation details are not provided in the supplied documents. No remediatio...

CVE-2004-1775

CVE-2004-1775 affects Cisco VACM (View-based Access Control MIB) used by CatOS and IOS. Affected: CatOS 5.5/6.1 and IOS 12.0/12.1. Issue: VACM permits remote read/write of device configuration via the read-write SNMP community string, enabling unauthorized read/modify actions. Evidence in connect...

CVE-2004-1775

Cisco VACM View-based Access Control MIB for Catalyst Operating Software CatOS 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string...

CVE-2002-1775

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus NAV 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initi...