Fedora Update for rubygem-actionpack FEDORA-2012-11870

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2012-11870 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for rubygem-actionpack FEDORA-2012-11870

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rubygem-actionpack FEDORA-2012-11353

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : rubygem-actionpack-3.0.11-6.fc17 (2012-11363)

Fix for CVE-2012-3424. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

FreeBSD Ports: rubygem-actionpack

The remote host is missing an update to the system as announced in the referenced advisory. VID ae2fa87c-4bca-4138-8be1-67ce2a19b3a8 OpenVAS Vulnerability Test $ Description: Auto generated from VID ae2fa87c-4bca-4138-8be1-67ce2a19b3a8 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora 16 : rubygem-actionpack-3.0.10-8.fc16 (2012-11353)

Fix for CVE-2012-3424. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

FreeBSD Ports: rubygem-actionpack

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-3424

The decodecredentials method in actionpack/lib/actioncontroller/metal/httpauthentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging...

CVE-2012-3424

The vulnerability CVE-2012-3424 affects Ruby on Rails Action Pack HTTP Digest authentication. The decode_credentials path in action_controller/metal/http_authentication.rb converts Digest strings to Ruby symbols, enabling a remote attacker who can access an app using with_http_digest/authenticate...

CVE-2012-3424 rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest

The decodecredentials method in actionpack/lib/actioncontroller/metal/httpauthentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging...

CVE-2011-3424

CVE-2011-3424 affects TIBCO Managed File Transfer Internet Server (7.0.x–7.1.0) and Command Center (7.0.x–7.1.0), and TIBCO Slingshot (1.8.0 and earlier). Root cause: defects in processing inbound HTTP requests leading to a session fixation vulnerability that can allow an attacker to hijack a web...

CVE-2010-3424

CVE-2010-3424 represents a Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board)

CVE-2009-3424

CVE-2009-3424 affects MaxCMS 3.11.20b: multiple remote file inclusion vulnerabilities when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying URLs in a set of 34 parameters across various files (e.g., includes/InstantSite/inc.is_root.php; classes/...php; ...

Fedora Update for condor FEDORA-2008-7205

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200511-05 (gnump3d)

The remote host is missing updates announced in advisory GLSA 200511-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200511-05 (gnump3d)

The remote host is missing updates announced in advisory GLSA 200511-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3424

The CVE-2008-3424 vulnerability affects Condor up to version 7.0.4, arising from improper handling of wildcards in ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, and HOSTDENY_WRITE in authorization policy lists. This could allow authenticated remote users to bypass access restrictions and submit jobs,...

CVE-2007-3424

The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors...

CVE-2007-3424

The affected software is WebAPP (Web-app.org) prior to version 0.9.9.7. The vulnerability lies in the moveim function of cgi-bin/cgi-lib/instantmessage.pl, which uses the tocat parameter as a subdirectory name when moving an instant message. The underlying impact is described as unknown in the so...

CVE-2006-3424

CVE-2006-3424 concerns multiple buffer overflows in the WebEx Downloader ActiveX Control, potentially affecting versions prior to November 2005. The vulnerability could allow remote code execution by an attacker via unspecified attack vectors. The connected documents confirm the affected componen...