CVE-2013-3382

CVE-2013-3382 (Cisco ASA NGFW) affects Cisco ASA NGFW module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12. A remote attacker can cause a denial-of-service by sending fragmented IPv4/IPv6 traffic, leading to device reload or traffic-processing outage. Root cause described as Bug CSCue88387. Miti...

SuSE 11.2 Security Update : Mono (SAT Patch Number 6543)

Mono was updated to fix a cross-site scripting attack in the System.Web class 'forbidden extensions' filtering has been fixed. CVE-2012-3382 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

Debian Security Advisory DSA 2512-1 (mono)

The remote host is missing an update to mono announced via advisory DSA 2512-1. OpenVAS Vulnerability Test $Id: deb25121.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2512-1 mono Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : mono vulnerabilities (USN-1517-1)

It was discovered that the Mono System.Web library incorrectly filtered certain error messages related to forbidden files. If a user were tricked into opening a specially crafted URL, an attacker could possibly exploit this to conduct cross-site scripting XSS attacks. CVE-2012-3382 It was...

USN-1517-1: Mono vulnerabilities

It was discovered that the Mono System.Web library incorrectly filtered certain error messages related to forbidden files. If a user were tricked into opening a specially crafted URL, an attacker could possibly exploit this to conduct cross-site scripting XSS attacks. CVE-2012-3382 It was...

CVE-2012-3382

Cross-site scripting XSS vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properl...

CVE-2012-3382

CVE-2012-3382 describes an XSS vulnerability in Mono 2.10.8 and earlier caused by improper handling of error messages for a crafted file name with a forbidden extension in System.Web/HttpForbiddenHandler.cs. The connected advisories show that multiple distributions (Mandriva, openSUSE, SUSE/OpenV...

[SECURITY] [DSA 2512-1] mono security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2512-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 12, 2012 http://www.debian.org/security/faq -...

CVE-2012-3382

Cross-site scripting XSS vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properl...

CVE-2011-3382

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3382

CVE-2011-3382 affects Phorum prior to 5.2.16 with a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary script or HTML via unspecified vectors. Public sources in connected docs identify Phorum 5.x as affected and repeatedly emphasize updating to the late...

CVE-2010-3382

tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3382

TAU (Tuning and Analysis Utilities) version 2.16.4 contains a vulnerability where a zero-length directory name is placed in LD_LIBRARY_PATH, allowing a local user to gain privileges via a Trojan horse shared library loaded from the current working directory. The issue is triggered by manipulating...

CVE-2010-3382

Removed by vendor...

CVE-2010-3382

tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004

The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...

RHEL 3 / 4 : tomcat in Satellite Server (RHSA-2007:1069)

Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages technologies. ...

VMSA-2010-0001 : ESX Service Console and vMA updates for nss and nspr

a. Update for Service Console packages nss and nspr Service console packages for Network Security Services NSS and NetScape Portable Runtime NSPR are updated to versions nss-3.12.3.99.3-1.2157 and nspr-4.7.6-1.2213 respectively. This patch fixes several security issues in the service console...

CentOS 5 : tomcat (CESA-2007:0871)

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and Java Server Pages technologies. Tomcat...

VMSA-2010-0001:ESX Service Console and vMA updates for nss and nspr

VMSA-2010-0001.1 ESX Service Console and vMA updates for nss and nspr VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0001.1 VMware Security Advisory Synopsis: ESX Service Console and vMA updates for nss and nspr VMware Security Advisory Issue date: 2010-03-03 VMware...