CVE-2002-2268

CVE-2002-2268 refers to a buffer overflow in the Webster HTTP Server that enables remote code execution through a long URL. The connected documents corroborate an exploitation path via buffer overflows (e.g., Webster HTTP Server GET Buffer Overflow) and show associated exploit activities in Metas...

CVE-2007-2268

CVE-2007-2268 : Multiple directory traversal vulnerabilities affect SWsoft Plesk for Windows (versions 7.6.1, 8.1.0, 8.1.1). The issue arises from unsafely handling the locale_id parameter in login.php3, login_up.php3 (and top.php3 per NASL) which allows an unauthenticated attacker to read arbitr...

Solaris 8 (x86) : 119465-17

Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119465-17

Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 119465-17

Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CentOS 4 : firefox (CESA-2005:586)

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...

CentOS 3 / 4 : mozilla (CESA-2005:587)

Updated mozilla packages that fix various security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug wa...

CVE-2006-2268

The CVE-2006-2268 entry describes a SQL injection in FlexCustomer 0.0.4 and earlier that allows remote attackers to bypass authentication and run arbitrary SQL via the admin/index.php and index.php interfaces, likely involving the checkuser/checkpass and username/password parameters. It also note...

[SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 810-1 [email protected] http://www.debian.org/security/ Martin Schulze September 13th, 2005 http://www.debian.org/security/faq -...

Fedora Core 3 : mozilla-1.7.10-1.3.1 (2005-616)

Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was found in the way Mozilla handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or...

firefox security update

CentOS Errata and Security Advisory CESA-2005:586 An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source We...

Important: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...

RHEL 4 : firefox (RHSA-2005:586)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:586 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content...

Fedora Core 3 : firefox-1.0.6-1.1.fc3 (2005-603)

Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...

CVE-2004-2268

PimenGest2 before 1.1.1 is affected: remote attackers can obtain the database password via debug information in rowLatex.inc.php. Root cause is leakage of sensitive credentials through debug data. Impact is partial confidentiality loss of the database credentials. No exploit details or specific m...

CVE-2005-2268

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...

CVE-2005-2268

CVE-2005-2268 affects Firefox up to 1.0.4 and Mozilla up to 1.7.8 (before 1.0.5/1.7.9) where Javascript dialogs were not clearly tied to the originating web page, enabling spoofing of dialog boxes from trusted sites and facilitating phishing attacks. The issue arises from the dialog origin not be...

CVE-2002-2268

Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL...