99 matches found
Security fix for the ALT Linux 10 package git version 1.7.3.4-alt1
Dec. 16, 2010 Dmitry V. Levin 1.7.3.4-alt1 - Updated to maint v1.7.3.4 fixes an XSS in gitweb, see CVE-2010-3906...
Security fix for the ALT Linux 8 package git version 1.7.3.4-alt1
Dec. 16, 2010 Dmitry V. Levin 1.7.3.4-alt1 - Updated to maint v1.7.3.4 fixes an XSS in gitweb, see CVE-2010-3906...
gitWeb 1.7.3.3 - Cross-Site Scripting
gitWeb 1.7.3.3 - Cross-Site Scripting -8 Description 8--8 Proof Of Concept 8- " -8 Credits 8- -8 Responsible Disclosure 8- 13-12-2010 Initial contact with upstream and vendor-sec 13-12-2010 Vendor Response and CVE-2010-3906 assignation 15-12-2010 Public Disclosure...
CVE-2010-3906
creationtimestamp| type| source ---|---|--- 2010-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15744...
gitWeb 1.7.3.3 - Cross-Site Scripting
-8 Description 8--8 Proof Of Concept 8- " -8 Credits 8- -8 Responsible Disclosure 8- 13-12-2010 Initial contact with upstream and vendor-sec 13-12-2010 Vendor Response and CVE-2010-3906 assignation 15-12-2010 Public Disclosure...
CVE-2009-3906
CVE-2009-3906 is a duplicate of CVE-2009-3606. The connected documents provide concrete details for CVE-2009-3606: an integer overflow in PSOutputDev::doImageL1Sep in Xpdf before 3.02pl4 (and in Poppler 0.x as used by kdegraphics KPDF) can be triggered by a crafted PDF to cause a heap-based buffe...
Mandriva Security Advisory MDVSA-2009:322 (mono)
The remote host is missing an update to mono announced via advisory MDVSA-2009:322. OpenVAS Vulnerability Test $Id: mdksa2009322.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:322 mono Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...
Ubuntu USN-826-1 (mono)
The remote host is missing an update to mono announced via advisory USN-826-1. OpenVAS Vulnerability Test $Id: ubuntu8261.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8261.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-826-1 mono Authors: Thomas...
USN-826-1: Mono vulnerabilities
It was discovered that the XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation. CVE-2009-0217 It was discovered that Mono did not properly escape certain attributes in th...
Gentoo Security Advisory GLSA 200601-10 (sun-jdk sun-jre-bin blackdown-jre blackdown-jdk)
The remote host is missing updates announced in advisory GLSA 200601-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-3906
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string...
CVE-2008-3906
CVE-2008-3906 is a CRLF injection vulnerability in Mono’s Sys.Web (versions 2.0 and earlier) that enables remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via CRLF sequences in the query string. Multiple advisories (Mandriva MDVSA-2008:210-1, Ubuntu USN-826-1,...
CVE-2007-3906
Mode C: CVE-2007-3906 affects Kaspersky Anti-Virus for Check Point FireWall-1. The vulnerability (unspecified vectors) may cause a denial-of-service kernel hang in all affected installs prior to Critical Fix 1 (version 5.5.161.0). Impact is partial availability; attacker role is not clearly defin...
CVE-2006-3906
Internet Key Exchange IKE version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service resource exhaustion via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that...
CVE-2006-3906
CVE-2006-3906 describes a DoS in the IKEv1 implementation on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls. The root cause is improper handling of large volumes of IKE Phase-1 requests, leading to resource exhaustion and degraded availability. Exploitation is possible without valid credent...
CVE-2006-3906
Internet Key Exchange IKE version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service resource exhaustion via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that...
CVE-2005-3906
CVE-2005-3906 concerns multiple unspecified vulnerabilities in Java reflection APIs that could let remote attackers escape the Java sandbox and access arbitrary files or run arbitrary code. The connected sources specify affected software as Sun/Blackdown JDK/JRE up to 1.4.2_08 (and 1.3.1_15 for C...