Preemptive Protection against Squid idnsALookup DNS Name Handling Buffer Overflow (CVE-2013-4115)

A buffer overflow vulnerability exists in Squid proxy...

CVE-2013-4115

CVE-2013-4115 : Buffer overflow in the idnsALookup function of Squid’s DNS lookup (dns_internal.cc) affects Squid 3.2–3.2.11 and 3.3–3.3.6, enabling a remote attacker to trigger memory corruption and cause a denial of service via a long DNS name. Connected advisories confirm affected products and...

Fedora Update for squid FEDORA-2013-13493

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : squid-3.2.13-1.fc18 (2013-13493)

This is security update that fixes CVE-2013-4123 and CVE-2013-4115. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 19 : squid-3.2.13-1.fc19 (2013-13468)

This is security update that fixes CVE-2013-4123 and CVE-2013-4115. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Updated squid packages fix security vulnerabilities

Due to incorrect data validation Squid is vulnerable to a buffer overflow attack when processing specially crafted HTTP requests. This problem allows any trusted client or client script who can generate HTTP requests to trigger a buffer overflow in Squid, resulting in a termination of the Squid...

CVE-2010-4115

CVE-2010-4115 affects HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011/025, TS100P002, TS200R005, TS201R014/015. It installs an undocumented admin account with the default password !admin, enabling remote attackers to gain privileged access to the management interface. HP’s securit...

[security bulletin] HPSBST02620 SSRT100356 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02660754 Version: 1 HPSBST02620 SSRT100356 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon ...

CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4115

CVE-2009-4115 affects CuteNews/CutePHP (CuteNews 1.4.6). The Categories module is vulnerable to multiple static code injection flaws that allow remote authenticated admins to inject arbitrary PHP code into data/category.db.php (via the category and Icon URL fields) or into data/ipban.php (via the...

CVE-2008-4115

creationtimestamp| type| source ---|---|--- 2008-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6451...

CVE-2007-4115

IT!CMS (itcms) 0.2 is affected by multiple XSS vulnerabilities. The flaw allows remote attackers to inject arbitrary script/HTML via the wndtitle parameter in lang-en.php, menu-ed.php, or titletext-ed.php. Root cause is not explicitly detailed in the provided documents; CVSS data indicates a MEDI...

CVE-2006-4115

CVE-2006-4115 describes a PHP remote file inclusion vulnerability in PgMarket 2.2.3, triggered when register_globals is enabled. The flaw allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter in common.inc.php. Connected sources (NVD entry) confirm the affected softw...