121 matches found
Debian: Security Advisory (DSA-1896-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1896-1 (opensaml, shibboleth-sp)
The remote host is missing an update to opensaml, shibboleth-sp announced via advisory DSA 1896-1. OpenVAS Vulnerability Test $Id: deb18961.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1896-1 opensaml, shibboleth-sp Authors: Thomas Reinke Copyright:...
[SECURITY] [DSA 1896-1] New Shibboleth 1.x packages fix potential code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1896-1 [email protected] http://www.debian.org/security/ Florian Weimer September 28, 2009 http://www.debian.org/security/faq -...
Mandrake Security Advisory MDVSA-2009:209 (java-1.6.0-openjdk)
The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:209. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Mandrake Security Advisory MDVSA-2009:209 (java-1.6.0-openjdk)
The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:209. OpenVAS Vulnerability Test $Id: mdksa2009209.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:209 java-1.6.0-openjdk Authors: Thomas Reinke Copyright:...
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1252)
The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documentes. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. CVE-2009-0217 The WebStart component...
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1252)
The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documentes. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. CVE-2009-0217 The WebStart component...
Fedora Core 11 FEDORA-2009-8329 (java-1.6.0-openjdk)
The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-8329. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora Core 10 FEDORA-2009-8337 (java-1.6.0-openjdk)
The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-8337. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Fedora Core 10 FEDORA-2009-8337 (java-1.6.0-openjdk)
The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-8337. OpenVAS Vulnerability Test $Id: fcore20098337.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8337 java-1.6.0-openjdk Authors: Thomas Reinke Copyrigh...
CVE-2009-1896
The CVE-2009-1896 entry concerns the Java Web Start framework in OpenJDK via IcedTea. Affected: OpenJDK/OpenJDK with Java Web Start on Fedora 10/11 (before 1.6.0.0-20.b16.fc10 and before 1.6.0.0-27.b16.fc11, respectively). Root cause: the framework trusts an entire application if any one of the l...
Fedora 10 : java-1.6.0-openjdk-1.6.0.0-20.b16.fc10 (2009-8337)
Urgent security fixes have been included. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Fedora 11 : java-1.6.0-openjdk-1.6.0.0-27.b16.fc11 (2009-8329)
Urgent security updates have been included Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
CVE-2008-1896
CVE-2008-1896 describes multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities versions 2.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through two parameters: (1) Redirect in login.asp and (2) OrderBy in member_send.asp. The consolidat...
CVE-2008-1896
creationtimestamp| type| source ---|---|--- 2008-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5456...
CVE-2007-1896
CVE-2007-1896 is a directory-traversal flaw in Sky GUNNING MySpeach 3.0.7 and earlier, affecting the file chat.php . The root cause is improper handling of a cookie parameter my_ms[root], allowing a attacker to trigger local file inclusion by using a double dot (“..”) path traversal with a traili...
CVE-2002-1896
CVE-2002-1896 describes a buffer overflow in Alsaplayer 0.99.71 when installed with setuid root , allowing local users to execute arbitrary code via a long command line argument in either the -f or -o option. The connected documents confirm the affected component, root-cause class (buffer overflo...
CVE-2005-1896
CVE-2005-1896 affects FlatNuke 2.5.3; a directory traversal vulnerability in thumb.php allows remote attackers to read arbitrary images or obtain the installation path via the image parameter. CVSS v2 base score 5.0 (MEDIUM) with network vector and low attack complexity; no exploitable details be...
CVE-2004-1896
This CVE affects Nullsoft Winamp versions 2.91 through 5.02, with a heap-based overflow in the in_mod.dll parser for Fasttracker 2 (.xm) mods. The vulnerability allows remote code execution via a malformed XM file, caused by a bound-check/heap-overflow condition in the XM/.MOD parsing path. The r...
