Debian: Security Advisory (DSA-1991-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1991-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 04, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1991-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 04, 2010 http://www.debian.org/security/faq -...

DSA-1991-1 squid squid3 - denial of service

Bulletin has no description...

IBM Tivoli Storage Manager Client Multiple Vulnerabilities (swg21405562)

The remote host is running an IBM Tivoli Storage Manager TSM client. The version running on the remote host has one or more of the following vulnerabilities : - A remote stack-based buffer overflow in the client acceptor daemon CAD scheduler could lead to the execution of arbitrary code...

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

CVE-2009-2855

CVE-2009-2855 affects Squid (notably Squid 2.7) via the strListGetItem function in src/HttpHeaderTools.c, where a crafted auth header containing certain comma delimiters can trigger an infinite loop in strcspn and cause a denial of service. Connected advisories (e.g., MiracleLinux AXSA:2010-169, ...

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

CVE-2008-2855

Affected software: OwnRS Beta 3. Component: clanek.php. Vulnerability: Cross-site scripting (XSS) via the id parameter. Root cause: lack of proper sanitization/output of user-supplied id leading to injection of arbitrary script/HTML. Impact: remote attacker can inject scripts into the victim’s br...

CVE-2008-2855

creationtimestamp| type| source ---|---|--- 2008-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5860...

Buffer overflow

Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855...

CVE-2007-2855

CVE-2007-2855 involves a buffer overflow in the DartZipLite.dll 1.8.5.3 ActiveX control (Dart ZipLite Compression for ActiveX). The vulnerability arises from a long first argument to the QuickZip function, enabling user‑assisted remote code execution. Affected component is the DartZipLite ActiveX...

CVE-2006-2855

CVE-2006-2855 describes an SQL injection in xueBook 1.0 where index.php is vulnerable via the start parameter. The root cause is insufficient input validation allowing arbitrary SQL execution by remote attackers. The vulnerability impact is remote compromise of the database (partial confidentiali...

CVE-2005-2883

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2855. Reason: This candidate is a duplicate of CVE-2005-2855. Notes: All CVE users should reference CVE-2005-2855 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2855

CVE-2005-2855 affects Unclassified NewsBoard 1.5.3 with a cross-site scripting (XSS) vulnerability in the description field. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted content to that field, enabling client-side code execution in the context of t...