102 matches found
Firefox 3.5.6 Denial Of Service
function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...
Fedora Core 11 FEDORA-2009-13333 (firefox)
The remote host is missing an update to firefox announced via advisory FEDORA-2009-13333. OpenVAS Vulnerability Test $Id: fcore200913333.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13333 firefox Authors: Thomas Reinke Copyright: Copyright c 2009...
Firefox Multiple Vulnerabilities Dec-09 (Linux)
The host is installed with Firefox Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulndec09lin02.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox Multiple Vulnerabilities Dec-09 Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6733)
The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...
SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1709)
The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...
Pandora FMS Monitoring Application 2.1.x 3.x - SQL Injection
Pandora FMS Monitoring Application 2.1.x 3.x - SQL Injection PenTest Information: ==================== GESEC Teamsmash & rem0ve discover a SQL Injection Vulnerability on Pandora FMS Monitoring Software. Attackers can manipulate the application DBMS over a remote sql-injection vulnerability. Detai...
Pandora FMS Monitoring Application 2.1.x /3.x - SQL Injection
PenTest Information: ==================== GESEC Teamsmash & rem0ve discover a SQL Injection Vulnerability on Pandora FMS Monitoring Software. Attackers can manipulate the application DBMS over a remote sql-injection vulnerability. Details ======= Tested on OS: UBUNTU 5.4 Tested with Software:...
Fedora 11 : Miro-2.5.2-7.fc11 / blam-1.8.5-17.fc11 / chmsee-1.0.1-14.fc11 / epiphany-2.26.3-7.fc11 / etc (2009-13333)
Update to new upstream Firefox version 3.5.6, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.6 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...
Mozilla Foundation Security Advisory 2009-66
Mozilla Foundation Security Advisory 2009-66 Title: Memory safety fixes in liboggplay media library Impact: Critical Announced: December 15, 2009 Reporter: Mozilla community and developers Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.6 SeaMonkey 2.0.1 Description Mozilla discovered several...
Mozilla Patches 7 Firefox Flaws, Bugs
The Mozilla developers have released version 3.5.6 of their open source Firefox web browser to address a total of seven vulnerabilities, three of them critical. Read the full article. The H Security...
CVE-2008-6844
The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...
CVE-2008-6844
The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...
eZ Publish Privilege Escalation
= 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info: http://ez.no/developer/security/securityadvisories/ezpublish39/ezsa2008003insufficientformhandlingmadeprivilegeescalationpossible tested on version 3.9.0 usage: ./eZPublishprivilegeescalationexploit.php -u=username -p=password -e=email...
EZ Publish < 3.9.5/3.10.1/4.0.1 - Privilege Escalation
= 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info: http://ez.no/developer/security/securityadvisories/ezpublish39/ezsa2008003insufficientformhandlingmadeprivilegeescalationpossible tested on version 3.9.0 usage: ./eZPublishprivilegeescalationexploit.php -u=username -p=password -e=email...
eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit
No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...
CVE-2007-6000
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...
CVE-2007-6000
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...
CVE-2003-1276
Netfone.exe of NetTelephone 3.5.6 is vulnerable due to weak encryption for user PINs and plaintext storage of account numbers in the registry (HKCU\Software\MediaRing.com\SDK\NetTelephone\settings). Local users could potentially gain unauthorized access to NetTelephone accounts. The connected doc...
WinSCP 3.5.6 - Long URI Handling Memory Corruption
WinSCP 3.5.6 - Long URI Handling Memory Corruption source: https://www.securityfocus.com/bid/10160/info It has been reported that WinSCP may be prone to a denial of service condition resulting from memory corruption. This issue occurs when the application attempts to handle excessively long 'sftp...
CVE-2003-1276
Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...