8091 matches found
squid security update
CentOS Errata and Security Advisory CESA-2005:766 An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid...
[SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 810-1 [email protected] http://www.debian.org/security/ Martin Schulze September 13th, 2005 http://www.debian.org/security/faq -...
BNBT BitTorrent EasyTracker 7.7r3 - Denial of Service
/ BNBT BitTorrent EasyTracker Remote Denial Of Service Versions: Version 7.7r3.2004.10.27 and below Vendors: http://bnbt.go-dedicated.com/ http://bnbteasytracker.sourceforge.net/ http://sourceforge.net/projects/bnbtusermods/ Bug find and coded by: Sowhat@@secway@org http://secway.org This PoC wil...
UnixWare ICMP Message Handling Denial of Service
Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...
HP-UX PHNE_33427 : s700_800 11.04 (VVOS) cumulative ARPA Transport patch
s700800 11.04 VVOS cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of...
CVE-2004-2482
Microsoft Outlook 2000 and 2003, when configured to use Word 2000/2003 as the e‑mail editor, is vulnerable to remote code execution via an improperly closed OBJECT tag in forwarded messages. The issue occurs because Outlook may automatically download the URI in the data property of the OBJECT tag...
CVE-2004-2483
Technical details about CVE-2004-2483 are not publicly available in the supplied documents; monitor for updates from official advisories. The provided references reiterate impact but do not add new specifics.
CVE-2004-2478
The CVE-2004-2478 entry concerns Jetty HTTP Server in affected products (IBM Trading Partner Interchange < 4.2.4; CA Unicenter Web Services Distributed Management
CVE-2004-2477
DiamondCS Process Guard Free 2.000 is affected. The issue arises from an attacker with local access overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT from ntoskrnl.exe, disabling the process guard protection. The vulnerability is local in scope...
CVE-2004-2479
The CVE-2004-2479 issue affects Squid Web Proxy Cache (2.5 era) where a remote attacker can cause DNS operations to fail by submitting URLs with invalid hostnames, leading Squid to reference previously used error messages. Connected advisories confirm this vulnerability and describe updates to Sq...
CVE-2004-2480
CVE-2004-2480 affects Squid Web Proxy Cache 2.3.STABLE5. The vulnerability allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL processed by Internet Explorer. The provided materials do not specify root cause details, affected versions beyo...
CVE-2004-2481
CVE-2004-2481 affects MyProxy 6.58. The vulnerability allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server by issuing a CONNECT command, bypassing access restrictions. No explicit exploit code or affected version range beyond 6.58 is provided in...
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer...
CVE-2004-2439
CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...
CVE-2004-2474
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...
CVE-2004-2466
CVE-2004-2466 affects Easy Chat Server. Public material shows a remote buffer overflow in the username/authentication handling that can crash the server (denial of service). Historical details reference v1.2 and later reports indicate v2.2 is affected; multiple exploit chains exist for Easy Chat ...
CVE-2004-2461
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service crash and possibly execute arbitrary code...
CVE-2004-2457
Technical details about CVE-2004-2457 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates.
CVE-2004-2468
SillySearch 2.3 and earlier are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the search parameter. The entry states the vulnerability type and affected version(s) but does not specify root cause details beyond the p...