Ubuntu Update for thunderbird USN-2032-1

Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN20321.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for thunderbird USN-2032-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : thunderbird vulnerabilities (USN-2032-1)

Multiple security issues were discovered in Thunderbird. If a user were tricked into connecting to a malicious server, an attacker could possibly exploit these to cause a denial of service via application crash, potentially execute arbitrary code, or lead to information disclosure. CVE-2013-1741,...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : firefox vulnerabilities (USN-2031-1)

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, potentially execute arbitrary code, or lead to information disclosure. CVE-2013-1741,...

Ubuntu: Security Advisory (USN-2031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL14638 - TLS/SSL RC4 vulnerability CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext. CVE-2013-2566...

CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext...

CVE-2013-2566

CVE-2013-2566 involves RC4 biases in TLS/SSL allowing plaintext-recovery via large volumes of sessions with the same plaintext. Multiple connected sources confirm this issue affecting products such as F5 BIG-IP (various modules) and IBM Proventia/SiteProtector family. Affected in some BIG-IP rele...

Debian: Security Advisory (DSA-2566-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566...

CVE-2012-2566

CVE-2012-2566 concerns Bloxx Web Filtering prior to 5.0.14. The issue is that the product does not correctly interpret the X-Forwarded-For header during HTTPS access-control and logging, which can allow an unauthenticated user to bypass IP/domain restrictions and produce misleading logs. The entr...

TFM MMPlayer (m3u/ppl File) Buffer Overflow

This module exploits a buffer overflow in MMPlayer 2.2 The vulnerability is triggered when opening a malformed M3U/PPL file that contains an overly long string, which results in overwriting a SEH record, thus allowing arbitrary code execution under the context of the user. Module Options msf use...

CVE-2010-2566

The CVE-2010-2566 issue is a remote code execution vulnerability in Microsoft Windows SChannel (TLS/SSL) where the SChannel security package fails to properly validate certificate request messages from TLS/SSL servers. This affects Windows XP SP2/SP3 and Windows Server 2003 SP2. An attacker could...

MS10-049: Vulnerabilities in SChannel could allow Remote Code Execution (980436)

The remote Windows host is running a version of the Secure Channel SChannel security package that is affected by one or more of the following vulnerabilities : - The SChannel authentication component allows a client to renegotiate the connection after the initial handshake, which could be abused ...

TFM MMPlayer '.m3u' Buffer Overflow Vulnerability - July-09

This host is installed with TFM MMPlayer and is prone to stack based Buffer Overflow bulnerability. OpenVAS Vulnerability Test $Id: secpodtfmmmplayerm3ubofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ TFM MM Player '.m3u' Buffer Overflow Vulnerability - July-09 Authors: Nikita MR Copyright:...

CVE-2009-2566

CVE-2009-2566 describes a stack-based buffer overflow in TFM MMPlayer triggered by a malformed M3U playlist, enabling arbitrary code execution. Public notes indicate the vulnerability affects MMPlayer 2.0 (and possibly 2.0.0.30); a later Metasploit module documents an exploit against MMPlayer (no...

CVE-2009-2566

creationtimestamp| type| source ---|---|--- 2009-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9047 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/tfmmmplayerm3upplbof.rb 2025-02-06...

CVE-2008-2566

creationtimestamp| type| source ---|---|--- 2008-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5739...

CVE-2007-2566

CVE-2007-2566 affects the Taltech Tal Bar Code ActiveX control. The SaveBarCode function allows remote attackers to cause a denial of service by uploading multiple bar codes, resulting in disk consumption. This is documented in the NVD entry and corroborated by multiple external references; explo...

CVE-2006-2566

Affected software: Alstrasoft Article Manager Pro 1.6. The vulnerability is an information disclosure that exposes the path via error messages in two potential inputs: (1) the action parameter in a request to mrarticles.php (possible quote character or invalid value) and (2) a login QUERY_STRING ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...