[SECURITY] [DSA 2548-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2548-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13, 2012 http://www.debian.org/security/faq -...

CVE-2012-3519

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack...

DEBIAN-CVE-2012-3519

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack...

CVE-2012-3519

CVE-2012-3519 affects Tor; routerlist.c in Tor before 0.2.2.38 uses different timing for relay-list iteration, enabling a timing side-channel to leak information about relay selection. Public discussion items in Debian/OSS advisories confirm the vulnerability and that the OpenBSD/OpenSSL-style fi...

CVE-2012-3519

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack...

CVE-2012-3519

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack...

CVE-2011-3519

CVE-2011-3519 affects Oracle E-Business Suite (OBiS) Oracle Applications Framework in versions 12.1.2 and 12.1.3. The vulnerability is described as unspecified and relates to REST Services, with remote authenticated access potentially affecting confidentiality. The provided documents do not speci...

CVE-2010-3519

CVE-2010-3519 is listed in the Oracle October 2010 CPU as affecting PeopleSoft Enterprise PeopleTools, specifically version 8.49.28 and 8.50.12. The CPU entries show the vulnerability is HTTP-based, may be exploited remotely over a network without authentication, with a CVSSv2 base score of 4.0 (...

CVE-2009-3519

CVE-2009-3519 affects the kernel IP module in Sun Solaris 8–10 and OpenSolaris up to snv_109. The issue is multiple memory leaks in STREAMS handling (vectors M_DATA, M_PROTO, M_PCPROTO, M_SIG) that allow local users to cause a denial of service via memory consumption. The description does not spe...

CVE-2008-3519

CVE-2008-3519 affects Red Hat JBoss Enterprise Application Platform (JBoss EAP) in the JBEAP/JBoss EAP 4.3 line (and 4.2.x in some advisories) where the production configuration enables DownloadServerClasses by default. This setting allows remote attackers to obtain non-EJB class files via a down...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP02 security update

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix various security issues are now available for Red Hat Enterprise Linux 5 as JBEAP 4.3.0.CP02. This update has been rated as having low security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP04 security update

Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix various security issues are now available for Red Hat Enterprise Linux 5 as JBEAP 4.2.0.CP04. This update has been rated as having low security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Solaris 9 (sparc) : 122300-61

SunOS 5.9: Kernel Patch. Date this patch was last updated by Sun : Nov/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2006-3519

CVE-2006-3519 concerns multiple XSS flaws in The Banner Engine (tbe) 4.0. The NVD entry documents that remote attackers can inject arbitrary web script/HTML via: (a) the text parameter in a search action to top.php, and (b) the adminpass or (c) adminlogin parameter to signup.php. The accompanying...

CVE-2005-3519

Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...

CVE-2005-3519

Multiple PHP file inclusion vulnerabilities affect MySource 2.14.0. The flaws allow remote attackers to execute arbitrary PHP code and include arbitrary local files through include path parameters in new_upgrade_functions.php, init_mysource.php, and various files using INCLUDE_PATH, SQUIZLIB_PATH...