CVE-2013-2503

Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...

PT-2013-3826

Name of the Vulnerable Software and Affected Versions Privoxy versions prior to 3.0.21 Description The issue makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 HTTP status code by not properly handling Proxy-Authenticate and Proxy-Authorization headers in the...

CVE-2013-2503: Improper Input Validation

Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...

Mozilla Thunderbird Multiple Vulnerabilities -01 (Feb 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...

Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...

PT-2013-2603

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 19.0 Firefox ESR versions prior to 17.0.3 Thunderbird versions prior to 17.0.3 Thunderbird ESR versions prior to 17.0.3 SeaMonkey versions prior to 2.16 Description The issue allows man-in-the-middle attackers...

CVE-2013-0776: Improper Certificate Validation

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...

Debian Security Advisory DSA 407-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 407-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 5.10 / 6.06 LTS / 6.10 : libgtop2 vulnerability (USN-407-1)

Liu Qishuai discovered a buffer overflow in the /proc parsing routines in libgtop. By creating and running a process in a specially crafted long path and tricking an user into running gnome-system-monitor, an attacker could exploit this to execute arbitrary code with the user's privileges. Note...

Timbuktu Detection (UDP)

The remote service is the UDP port for Timbuktu, a remote control software application for Windows and Mac OS X. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25953; scriptversion"1.10"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Timbuktu Detection UDP";...

CVE-2005-0147: Undefined Security Weakness

Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials...

CVE-2004-0810

Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...

CVE-2004-0810

Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...

CVE-2004-0810: Undefined Security Weakness

Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...

Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue

-- Corsaire Security Advisory -- Title: Netopia Timbuktu remote buffer overflow issue Date: 20.07.04 Application: Timbuktu v7.0.3 Environment: Mac OS X 10.1, 10.2, 10.3 Author: Stephen de Vries [email protected] Audience: General release Reference: c040720-001 -- Scope -- The aim of...

CVE-2000-0142

Summary: Timbuktu Pro 2.0b650 contains a vulnerability in its authentication protocol that lets remote attackers cause a denial of service by connecting to ports 407 and 1417. What’s affected: Timbuktu Pro, version 2.0b650; vulnerability relates to the authentication mechanism and affects availab...

CVE-2000-0142: Undefined Security Weakness

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417...

PT-2000-1127 · Netopia · Timbuktu Pro

Name of the Vulnerable Software and Affected Versions: Timbuktu Pro version 2.0b650 Description: The issue affects the authentication protocol, allowing remote attackers to cause a denial of service. This can be achieved via connections to port 407 and port 1417. Recommendations: For Timbuktu Pro...

Netopia Timbuktu Pro Remote Control 2.05.2.1 - Denial of Service

Netopia Timbuktu Pro Remote Control 2.05.2.1 - Denial of Service source: https://www.securityfocus.com/bid/984/info Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process...