[SECURITY] [DSA 1859-1] New libxml2 packages fix several issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1859-1 [email protected] http://www.debian.org/security/ Nico Golde August 10th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1859-1] New libxml2 packages fix several issues

-------------------------------------------------------------------------- Debian Security Advisory DSA-1859-1 [email protected] http://www.debian.org/security/ Nico Golde August 10th, 2009 http://www.debian.org/security/faq -...

DSA-1859-1 libxml2 - several issues

Bulletin has no description...

libxml and libxml2 security update

libxml: 1:1.8.17-9.3 - fix a couple of crash - Resolves: rhbg515226 libxml2: 2.6.26-2.1.2.8.0.1 - Add libxml2-enterprise.patch and update logos in tarball 2.6.26-2.1.2.8 - Fix a couple of crash CVE-2009-2414 and CVE-2009-2416 - Resolves: rhbz515236...

CVE-2008-2414

The CVE-2008-2414 entry describes a Cross-Site Scripting (XSS) vulnerability in AN Guestbook (ANG) 0.4, specifically in send_email.php. The issue allows remote attackers to inject arbitrary web script or HTML via the postid parameter, implying an input/output handling flaw that potentially enable...

CVE-2002-2414

Opera 6.0.3, when used with Squid 2.4 as an HTTPS proxy, does not properly handle accepting a non-global certificate authority (CA) certificate from a site before establishing a subsequent HTTPS connection, which can allow remote attackers to cause a denial of service (crash). The connected docum...

openSUSE 10 Security Update : dovecot (dovecot-1398)

Users could potentially find out mailbox names of other users CVE-2006-2414. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-1398. The text description of this plugin is C SUSE LLC...

CVE-2007-2414

Technical details about CVE-2007-2414 are not publicly available in the provided documents. Monitor for updates from vendors and CERTs.

IMAP Directory Traversal (CAN-2005-1902; CAN-2006-2414)

...

[SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 1080-1 [email protected] http://www.debian.org/security/ Steve Kemp May 29th, 2006 http://www.debian.org/security/faq -...

CVE-2006-2414

Dovecot IMAP in 1.0 beta and 1.0 is affected by a directory traversal in LIST/DELETE IMAP commands, allowing remote attackers to enumerate mailbox names under the mbox directory. The issue is a remote programming error that can disclose information. Debian and other advisories document fixes: upg...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1 (Overlay CD installation/upgrade with OpenSSH, custom install) stores admin passwords in NIOUTPUT.TXT and NI.LOG during installation. Local users could access these log files and recover passwords, constituting an information-disclosure vulnerability. The vulnerability i...

CVE-2005-2414

CVE-2005-2414 describes a race condition in the xpcom library (used by Firefox, Mozilla, Netscape, Galeon) that can crash the target browser. An attacker could trigger a hard crash by rendering a large HTML file that loads a DOM call from within nested DIV tags, causing parts of the currently ren...

CVE-2002-2414

Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority CA certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service crash...