63 matches found
CVE-2015-4334
The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...
Default configuration
The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...
CVE-2015-4334
CVE-2015-4334 affects Blue Coat ProxySG SGOS when deployed as an explicit proxy. The default configuration forwards authentication challenges from upstream origin content servers, enabling a remote attacker to obtain sensitive information via HTTP 407 responses. Affected SGOS versions are before ...
rt.com XSS vulnerability
Vulnerable URL: https://www.rt.com/search/?q=x=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 407 Google Pagerank| 7 VIP website status:| Yes Check rt.com SSL connection:| Grade:...
Amazon Linux: Security Advisory (ALAS-2014-407)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
photobucket.com XSS vulnerability
Vulnerable URL: http://photobucket.com/images/%22%3E%3C/textarea%3E%3C%3CsCRipT%3Ealert%28%22XSSPOSED%22%29;//%3C%3C/sCRipT%3E%3Ctextarea%20rows=1%20cols=1%3E%3Cinput%20value=%22 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:09 GMT...
CVE-2015-1229
net/http/proxyclientsocket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 aka Proxy Authentication Required HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...
UBUNTU-CVE-2014-8639
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 aka Proxy Authentication Required status code, which allows remote HTTP proxy servers to conduct session...
Netopia Timbuktu Pro Remote Control 2.0/5.2.1 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/984/info Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process will need to be killed and the...
CVE-2013-2503
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
UBUNTU-CVE-2013-2503
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
Mozilla Thunderbird Multiple Vulnerabilities -01 (Feb 2013) - Mac OS X
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...
Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...
Debian Security Advisory DSA 407-1 (ethereal)
The remote host is missing an update to ethereal announced via advisory DSA 407-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 5.10 / 6.06 LTS / 6.10 : libgtop2 vulnerability (USN-407-1)
Liu Qishuai discovered a buffer overflow in the /proc parsing routines in libgtop. By creating and running a process in a specially crafted long path and tricking an user into running gnome-system-monitor, an attacker could exploit this to execute arbitrary code with the user's privileges. Note...
Timbuktu Detection (UDP)
The remote service is the UDP port for Timbuktu, a remote control software application for Windows and Mac OS X. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25953; scriptversion"1.10"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Timbuktu Detection UDP";...
CVE-2004-0810
Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...
CVE-2004-0810
Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...
Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue
-- Corsaire Security Advisory -- Title: Netopia Timbuktu remote buffer overflow issue Date: 20.07.04 Application: Timbuktu v7.0.3 Environment: Mac OS X 10.1, 10.2, 10.3 Author: Stephen de Vries [email protected] Audience: General release Reference: c040720-001 -- Scope -- The aim of...