Fedora Update for rt3 FEDORA-2012-8290

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

DEBIAN-CVE-2012-2085

The execcommand function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute...

CVE-2012-2085

The execcommand function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute...

CVE-2012-2085

CVE-2012-2085 affects Gajim prior to 0.15. The vulnerability is in the exec_command function (common/helpers.py) and allows user‑assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute. Public references (NVD/OpenVAS/other advisories) confirm the issu...

Debian DSA-2480-4 : request-tracker3.8 - several vulnerabilities

Several vulnerabilities were discovered in Request Tracker, an issue tracking system : - CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. - CVE-2011-2083 Several cross-site scripting issues have been discovered. -...

CVE-2011-2085

CVE-2011-2085 affects Best Practical Solutions RT, with CSRF vulnerabilities that could hijack user sessions. Affected are RT 3.x before 3.8.12 and RT 4.x before 4.0.6. The advisory details multiple issues—CSRF in particular allows remote attackers to impersonate legitimate users. The connected d...

Fedora Update for rt3 FEDORA-2012-8339

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rt3 FEDORA-2012-8363

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2480-1 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2480-1. OpenVAS Vulnerability Test $Id: deb24801.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2480-1 request-tracker3.8 Authors: Thomas Reinke Copyright: Copyright c 20...

Debian Security Advisory DSA 2480-1 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2480-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Debian Security Advisory DSA 2453-2 (gajim)

The remote host is missing an update to gajim announced via advisory DSA 2453-2. OpenVAS Vulnerability Test $Id: deb24532.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2453-2 gajim Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2453-2] gajim regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2453-2 [email protected] http://www.debian.org/security/ Nico Golde April 19, 2012 http://www.debian.org/security/faq -...

Debian DSA-2085-1 : lftp - missing input validation

It was discovered that in lftp, a command-line HTTP/FTP client, there is no proper validation of the filename provided by the server through the Content-Disposition header; attackers can use this flaw by suggesting a filename they wish to overwrite on the client machine, and then possibly execute...

CVE-2010-2085

CVE-2010-2085 affects Microsoft .NET / ASP.NET prior to 1.1, where the default EnableViewStateMac is FALSE, allowing remote attackers to perform cross-site scripting via the __VIEWSTATE parameter. This is corroborated by multiple connected sources (Red Hat advisory, OpenVAS entry, and OpenVAS/SSV...

CVE-2009-2085

The Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans E...

CVE-2009-2085

The Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans E...

CVE-2009-2085

CVE-2009-2085 affects IBM WebSphere Application Server 6.1 (before 6.1.0.25) and 7.0 (before 7.0.0.5). The vulnerability arises from improper handling of Identity Assertion when CSIv2 Security is used, allowing remote attackers to bypass intended CSIv2 access restrictions via vectors involving En...

Fedora Update for sipp FEDORA-2008-6210

Check for the Version of sipp OpenVAS Vulnerability Test Fedora Update for sipp FEDORA-2008-6210 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 9 : sipp-3.1-2.fc9 (2008-6219)

This update fixes : - Bug 446182 - CVE-2008-2085 sipp: buffer overflows in getremoteipmedia and getremoteipv6media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Fedora 8 : sipp-3.1-2.fc8 (2008-6210)

This update fixes : - Bug 446182 - CVE-2008-2085 sipp: buffer overflows in getremoteipmedia and getremoteipv6media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...