[BSA-048] Security Update for Iceweasel

I uploaded new packages for iceweasel which fixed the following security problems: CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog - which has "open" as the default action -, while a user presses the ENTER key. CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jes...

Ubuntu: Security Advisory (USN-1210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for firefox CESA-2011:1341 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2313-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox : - CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key. - CVE-2011-2995 Benjamin Smedberg, Bob Cla...

RedHat Update for firefox RHSA-2011:1341-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2312-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key. - CVE-2011-2995 Benjami...

Ubuntu: Security Advisory (USN-1222-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2313-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2313-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 29, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2312-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2312-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 29, 2011 http://www.debian.org/security/faq -...

CVE-2011-3000

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...

CVE-2011-3000

Affected software: Mozilla Firefox before 3.6.23 and 4.x through 6; also affects Thunderbird before 7.0 and SeaMonkey before 2.4. Root cause: HTTP response handling flaw that allows HTTP response splitting when responses contain multiple Location, Content-Length, or Content-Disposition headers. I...

Mozilla Firefox < 7.0 Multiple Vulnerabilities

Binary data 6028.prm...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2011-2581

The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...

Design/Logic Flaw

The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...

CVE-2011-2581

Cisco Nexus NX-OS ACL bypass (CVE-2011-2581) affects Nexus 5000 and 3000 series: placing a remark before a deny in an ACL can allow bypass of access restrictions, enabling remote packet flow in opportunistic scenarios. Root cause: improper handling of comments when paired with deny statements. Af...

CVE-2011-2581

The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...

Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability Advisory ID: cisco-sa-20110907-nexus Revision 1.0 For Public Release 2011 September 07 1600 UTC GMT...

Joomla AutoArticles 3000 Blind SQL Injection

========================================================= Joomla Component AutoArticles 3000 Blind SQL Injection ========================================================= +Title : Joomla Component AutoArticles 3000 Blind SQL Injection +Software : AutoArticles 3000 +Vendor :...

Joomla! Component AutoArticles 3000 - SQL Injection

Joomla! Component AutoArticles 3000 - SQL Injection source: https://www.securityfocus.com/bid/44694/info The AutoArticles 3000 component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...