Gentoo Security Advisory GLSA 200812-06 (libxml2)

The remote host is missing updates announced in advisory GLSA 200812-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-4409. Reason: This candidate is a duplicate of CVE-2008-4409. Notes: All CVE users should reference CVE-2008-4409 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2008-4422

CVE-2008-4422 is marked as a duplicate of CVE-2008-4409 and has had its references removed to prevent usage. Independent connected sources describe multiple libxml2 vulnerabilities affecting pre-2.9.3 releases (e.g., 2.9.3 or earlier, with fixes in 2.9.3/2.9.4+ and later). Root causes include hea...

CVE-2008-4409

CVE-2008-4409 affects libxml2 (versions 2.7.0 and 2.7.1). It arises from improper handling of predefined entities definitions in entities, enabling context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by the use of xmllint on a speci...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

CVE-2007-4409

CVE-2007-4409 describes a race condition in ircu versions 2.10.12.01–2.10.12.05 that can let remote attackers gain an Apass during a netburst by pre-granting ops privileges before the mode arrives. This is a privilege-change vulnerability in the IRC server component. Impact: potential privilege e...

Apple Mac OS X Security Framework Online Certificate Status Protocol (OCSP) service fails to properly retrieve certificate revocation lists

Overview Apple Mac OS X Security Framework Online Certificate Status Protocol OCSP service is unable to retrieve certificate revocation lists on systems that are configured to use an HTTP proxy. This vulnerability may result in the use of revoked certificates. Description The Online Certificate...

CVE-2006-4409

The CVE-2006-4409 issue is concrete: OCSP in Apple Mac OS X Security Framework could fail to retrieve CRLs when a system uses an HTTP proxy (affecting Mac OS X 10.4 to 10.4.8). This could allow revoked certificates to be accepted by the system. The vulnerability pertains to the OCSP service, and ...

CVE-2005-4409

CVE-2005-4409 is a cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Affected component: MMBase (version 1.7.4 and earlier). Root cause: unsafeguarded handling of user-su...