SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 2163)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

CVE-2007-2163

Apple Safari is affected by CVE-2007-2163: remote attackers can cause a denial of service by crafting JavaScript that matches a regular expression against an unusually long string, demonstrated with /(.)*/. The provided documents identify the vulnerable component as the Safari JavaScript engine a...

CVE-2006-2163

CVE-2006-2163 is an XSS vulnerability in Pinnacle Cart (versions up to 3.33 and earlier) where the setbackurl parameter in index.php can be exploited to inject arbitrary script/HTML. The root cause is unvalidated/unsanitized input propagated to the browser. Affected software is Pinnacle Cart 3.33...

CVE-2005-2163

AutoIndex PHP Script 1.5.2 is affected by a stored/reflected XSS in index.php via the search parameter. The vulnerability allows an attacker to inject arbitrary HTML/JavaScript, which is executed in the victim’s browser and can lead to cookie theft or session hijacking. The Nessus entry confirms ...

CVE-2004-2163

loginradius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies...

CVE-2002-2163

KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "alreadyvoted" cookie by various methods, including a direct call to clearcookies.php...