CVE-2013-4505

CVE-2013-4505 affects Apache Subversion: is_this_legal bypasses access restrictions in mod_dontdothat, enabling a remote attacker to trigger resource consumption/DoS via a crafted relative URL in a REPORT request for Subversion 1.4.0–1.7.13 and 1.8.0–1.8.4. Public advisories and OpenVAS/Nessus pl...

Amazon Linux AMI : libproxy (ALAS-2012-140)

A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration PAC files. A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute arbitrary code, if th...

Medium: libproxy

Issue Overview: A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration PAC files. A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute...

Scientific Linux Security Update : libproxy on SL6.x i386/x86_64 (20121114)

A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration PAC files. A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute arbitrary code, if th...

Ubuntu: Security Advisory (USN-1629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : libproxy (RHSA-2012:1461)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1461 advisory. libproxy is a library that handles all the details of proxy configuration. A buffer overflow flaw was found in the way libproxy handled the downloadi...

RedHat Update for libproxy RHSA-2012:1461-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

libproxy security update

0.3.0-3 - Fix CVE-2012-4505...

USN-1629-1: libproxy vulnerabilities

Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code. CVE-2012-4504, CVE-2012-4505...

CVE-2012-4505

Heap-based buffer overflow in the pxpacreload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504...

CVE-2012-4521

CVE-2012-4521 is rejected; duplicate of CVE-2012-4505.

CVE-2012-4505

CVE-2012-4505 is a heap-based buffer overflow in libproxy’s PAC handling. The flaw resides in px_pac_reload (lib/pac.c) in libproxy 0.2.x and 0.3.x, exploitable by a crafted Content-Length in an HTTP response header for a proxy.pac request, leading to potential crash or arbitrary behavior. Public...

[SECURITY] [DSA 2571-1] libproxy security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2571-1 [email protected] http://www.debian.org/security/ Raphael Geissert November 04, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2571-1] libproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2571-1 [email protected] http://www.debian.org/security/ Raphael Geissert November 04, 2012 http://www.debian.org/security/faq -...

CVE-2011-4505

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4505

The CVE-2011-4505 issue affects SpeedTouch 5x6 devices running firmware before 6.2.29. The UPnP IGD implementation exposes a vulnerability where remote attackers can establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, tied to an "exter...

CVE-2009-4505

CVE-2009-4505 concerns the OpenCMS OAMP Comments Module (v1.0.0). The vulnerability arises from unfiltered user input being reflected in comments, enabling cross-site scripting (XSS) across visitors. The Compass Security advisory details exploitability and shows the impact as potential impersonat...

CVE-2008-4505

Affected software: IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1). Vulnerability: unspecified issue that could allow a denial of service (system crash) via a nonstandard URL argument to the OpenDocument command. Impact: potential system crash; availability impact (CVE description). Status: vend...

CVE-2007-4505

The CVE-2007-4505 entry describes a SQL injection in Mambo’s RemoSitory component (com_remository) within index.php, exploitable via the cat parameter in a selectcat action to execute arbitrary SQL. Affected software is Mambo with the RemoSitory component; the root cause is unsanitized/crafted in...

CVE-2005-4505

CVE-2005-4505 describes an unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5). The underlying issue is an unquoted Program Files path that causes naPrdMgr.exe to execute EntVUtil.EXE, enabling local users to gain privileges via a malici...