Django 目录遍历序列(CVE-2013-4315)

BUGTRAQ ID: 62332 CVECAN ID: CVE-2013-4315 Django是Python编程语言驱动的一个开源Web应用程序框架。 Django在ssi模板标签的实现上存在目录遍历漏洞，攻击者可利用此漏洞获取敏感信息。 0 Django 1.4.x 厂商补丁： Django ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.djangoproject.com/...

[SECURITY] [DSA 2755-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2755-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 11, 2013 http://www.debian.org/security/faq -...

Scientific Linux Security Update : tog-pegasus on SL5.x i386/x86_64

Scientific Linux defines additional security enhancements for OpenGroup Pegasus WBEM services in addition to those defined by the upstream OpenGroup Pegasus release. After re-basing to version 2.7.0 of the OpenGroup Pegasus code, these additional security enhancements were no longer being applied...

VUL-0: nginx: heap overflow (important)

A flaw in the custom DNS resolver of nginx could lead to a heap based buffer overflow which could potentially allow attackers to execute arbitrary code or to cause a Denial of Service bnc731084, CVE-2011-4315...

Medium: nginx

Issue Overview: Heap-based buffer overflow in compression-pointer processing in core/ngxresolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service daemon crash or possibly have unspecified other impact via a long response. Affected Packages: nginx Issue Correction: Run...

Fedora Update for nginx FEDORA-2011-16110

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4315

CVE-2011-4315 describes a heap-based buffer overflow in nginx’s DNS resolver path (core/ngx_resolver.c) that can be triggered by compression-pointer processing. Affected: nginx versions prior to 1.0.10. Impact stated across sources: remote resolvers may cause a denial of service (daemon crash) an...

Buffer overflow in resolver

Buffer overflow in resolver Severity: medium CVE-2011-4315 Not vulnerable: 1.1.8+, 1.0.10+ Vulnerable: 0.6.18-1.1.7...

Fedora 15 : nginx-1.0.10-1.fc15 (2011-16110)

fix for CVE-2011-4315 nginx: heap overflow in ngxresolvercopy Update to latest stable version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : nginx-1.0.10-1.fc16 (2011-16075)

fix for CVE-2011-4315 nginx: heap overflow in ngxresolvercopy Update to latest stable version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

nginx is prone to a remote heap-based buffer-overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx"...

nginx DNS解析器远程堆缓冲区溢出漏洞

Bugtraq ID: 50710 CVE ID：CVE-2011-4315 nginx是一款高性能的web服务器，使用非常广泛，其不仅经常被用作反向代理，也可以非常好的支持PHP的运行。 当处理DNS应答时"ngxresolvercopy"函数ngxresolver.c存在边界错误，构建特制DNS应答可触发基于堆的缓冲区溢出。 DNS解析器一般用于代理和fastcgi模块，默认不启用。 Igor Sysoev nginx 1.0.9 Igor Sysoev nginx 1.0.8 Igor Sysoev nginx 0.8.40 Igor Sysoev nginx 0.8.36 Igo...

SuSE 11.1 Security Update : dhcp (SAT Patch Number 4315)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...

CentOS 5 : tog-pegasus (CESA-2008:1001)

Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM services...

CVE-2009-4315

CVE-2009-4315 : Directory traversal vulnerability in Nuggetz CMS 1.0 (admin/ajaxsave.php) allows remote attackers to create or modify arbitrary files via a .. payload in the nugget parameter and a modified pagevalue parameter, leading to execution of arbitrary PHP code by accessing a created .php...

CVE-2009-4315

creationtimestamp| type| source ---|---|--- 2009-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10378...

RedHat Update for tog-pegasus RHSA-2008:1001-01

Check for the Version of tog-pegasus OpenVAS Vulnerability Test RedHat Update for tog-pegasus RHSA-2008:1001-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CVE-2008-4315

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

CVE-2008-4315

CVE-2008-4315 affects tog-pegasus (OpenPegasus WBEM) on RHEL 5, Fedora 9/10. The root cause is that failed authentication attempts to the OpenPegasus CIM server are not logged, which can enable password-guessing attacks to go undetected. Public references in connected documents show Red Hat/CentO...

tog security update

CentOS Errata and Security Advisory CESA-2008:1001 Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide...