squid security update

7:3.1.23-16.4 - Related: 1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws 7:3.1.23-16.3 - Resolved: 1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws - Related: 1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: various flaws 7:3.1.23-16.2 - Related: 13305...

RHEL 6 : squid34 (RHSA-2016:1140)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:1140 advisory. The squid34 packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP...

Squid 3.x < 3.5.17 / 4.x < 4.0.9 Esi.cc Multiple Vulnerabilities

According to its banner, the version of Squid running on the remote host is 3.x prior to 3.5.17 or 4.x prior to 4.0.9. It is, therefore, affected by multiple vulnerabilities : - An assertion fault exists in file esi/Esi.cc that is triggered when handling ESI responses. An unauthenticated, remote...

Debian DLA-478-1 : squid3 security update

Several security issues have been discovered in the Squid caching proxy. CVE-2016-4051 CESG and Yuriy M. Kaminskiy discovered that Squid cachemgr.cgi was vulnerable to a buffer overflow when processing remotely supplied inputs relayed through Squid. CVE-2016-4052 CESG discovered that a buffer...

CVE-2016-4053

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes ESI responses, related to incorrect use of assert and compiler optimization...

CVE-2016-4053

CVE-2016-4053 in Squid allowed public information disclosure of the server stack layout when processing ESI responses. The issue is documented across multiple advisories (Debian, Red Hat/CentOS, Fedora, Amazon ALAS) with fixes in various branches: Debians fixed squid3 3.1.20-2.2+deb7u5; Jessie/St...

CVE-2016-4053

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes ESI responses, related to incorrect use of assert and compiler optimization...

squid: multiple issues

CVE-2016-4051 denial of service Due to incorrect buffer management Squid cachemgr.cgi tool is vulnerable to a buffer overflow when processing remotely supplied inputs relayed to it from Squid. - CVE-2016-4052 denial of service Due to buffer overflow issues Squid is vulnerable to a denial of...

Moderate: Red Hat Security Advisory: ceph-deploy security update

An updated ceph-deploy package that fixes two security issues is now available in Red Hat Ceph Storage 1.2 for CentOS 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Moderate: Red Hat Security Advisory: ceph-deploy security update

An updated ceph-deploy package that fixes two security issues is now available in Red Hat Ceph Storage for Ubuntu 12.04 and Ubuntu 14.04. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

RHEL 6 / 7 : ceph-deploy (RHSA-2015:1092)

An updated ceph-deploy package that fixes two security issues is now available for Red Hat Ceph Storage. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

Moderate: Red Hat Security Advisory: ceph-deploy security update

An updated ceph-deploy package that fixes two security issues is now available for Red Hat Ceph Storage. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

CVE-2015-4053

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file...

CVE-2015-4053

CVE-2015-4053 affects ceph-deploy prior to 1.5.25, where the admin keyring (/etc/ceph/ceph.client.admin.keyring) is created with world-readable permissions. This allows a local user to read sensitive credentials. Remediation: upgrade ceph-deploy to 1.5.25 or newer (as cited by Red Hat and OSV/GHS...

ME Download System header.php Parameter PHP Code Execution - Ver2 (CVE-2006-4053)

A code execution vulnerability has been reported in ME Download System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-4053

CVE-2013-4053 refers to IBM WebSphere Application Server WS-Security with XML Digital Signature using a trust store, where improper certificate verification could let a remote attacker gain privileged access. Affected products/versions include WebSphere Application Server 8.5, 8.0, 7.0, and 6.1 (...

CVE-2012-4053

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-4053

The CVE-2011-4053 issue affects 7-Technologies IGSS (Interactive Graphical SCADA System). It describes an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse DLL in the current working directory, before IGSS patch version 9.0.0.11291. Public so...

IBM Informix Dynamic Server 'oninit.exe' Buffer Overflow Vulnerability (Windows)

This host is installed with IBM Informix Dynamic Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibminformixdynamicserveroninitbofvulnwin.nasl 5888 2017-04-07 09:01:53Z teissa $ IBM Informix Dynamic Server 'oninit.exe' Buffer Overflow Vulnerability Windows...

7-Technologies Interactive Graphical SCADA

Overview ICS-CERT originally released Advisory ICSA-11-353-01P on the US-CERT secure portal on December 19, 2011. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of Security Research and Service Institute--Information and...