102 matches found
CVE-2010-2057
CVE-2010-2057 affects Apache MyFaces: shared/util/StateUtils.java uses an encrypted View State without a Message Authentication Code (MAC) in MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1. The underlying issue is lack of MAC protection on the serialized View State, enabli...
CVE-2010-4007
Oracle Mojarra uses an encrypted View State without a Message Authentication Code MAC, which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057...
Debian Security Advisory DSA 2057-1 (mysql-dfsg-5.0)
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 2057-1. OpenVAS Vulnerability Test $Id: deb20571.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2057-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Sof...
Debian DSA-2057-1 : mysql-dfsg-5.0 - several vulnerabilities
Several vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1626 MySQL allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in...
CVE-2009-2057
Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a 1 4xx or 2 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL...
CVE-2009-2057
Microsoft Internet Explorer prior to version 8 is described as vulnerable to an SSL-tampering style attack where the HTTP Host header is used to determine the document context in a 4xx or 5xx CONNECT response from a proxy. This allows a man-in-the-middle attacker to modify the CONNECT response an...
Gentoo Security Advisory GLSA 200704-16 (aircrack-ng)
The remote host is missing updates announced in advisory GLSA 200704-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2057
CVE-2008-2057 covers a denial-of-service vulnerability in the Instant Messenger (IM) inspection engine of Cisco ASA/PIX devices. A crafted packet can trigger a DoS condition on affected appliances. The entry explicitly maps to Cisco advisories documenting an IM inspection vulnerability (CVE-2008-...
Fedora 8 : xen-3.1.2-2.fc8 (2008-2057)
Sat Feb 23 2008 Daniel P. Berrange - 3.1.2-2.fc8 - Fix block device extents check rhbz 433560 - Sat Dec 1 2007 Daniel P. Berrange - 3.1.2-1.fc8 - Upgrade to 3.1.2 bugfix release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
Debian Security Advisory DSA 1280-1 (aircrack-ng)
The remote host is missing an update to aircrack-ng announced via advisory DSA 1280-1. OpenVAS Vulnerability Test $Id: deb12801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1280-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian DSA-1280-1 : aircrack-ng - buffer overflow
It was discovered that aircrack-ng, a WEP/WPA security analysis tool, performs insufficient validation of 802.11 authentication packets, which allows the execution of arbitrary code. The oldstable distribution sarge doesn't contain aircrack-ng packages. %NASLMINLEVEL 70300 C Tenable Network...
[SECURITY] [DSA 1280-1] New aircrack-ng packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1280-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 24th, 2007 http://www.debian.org/security/faq -...
CVE-2007-2057
Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...
CVE-2007-2057
Summary of CVE-2007-2057 (aircrack-ng) The vulnerability is a stack-based buffer overflow in the airodump-ng component of aircrack-ng (affecting the 0.7 series) triggered by processing crafted 802.11 authentication packets. This can allow a remote attacker to execute arbitrary code with the privi...
CVE-2006-2057
The CVE-2006-2057 issue affects Mozilla Firefox 1.0.6. It describes an argument injection vulnerability where user-assisted attackers could alter command line arguments of an invoked mail client via double-quote characters in a mailto: handler, demonstrated by launching Outlook with an arbitrary ...
CVE-2005-2057
The CVE-2005-2057 entry concerns Infopop UBB.Threads prior to version 6.5.2 Beta, with multiple reflected cross-site scripting (XSS) vulnerabilities. The NVD description specifies specific injectable parameters across several scripts: (1) dosearch.php (Searchpage), (2) Number, (3) what, or (4) pa...
CVE-2004-2057
CVE-2004-2057 affects ASPrunner, specifically version 2.4. The vulnerability is described as a SQL injection that would let remote attackers execute arbitrary SQL statements. The provided connected documents confirm the flaw exists in ASPrunner 2.4 and indicate multiple issues in older ASPrunner ...
CVE-2004-2057
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements...
CVE-2002-2057
TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...