55 matches found
Fedora 19 : bip-0.8.9-1.fc19 (2013-21060)
Upstream v0.8.9 - CVE-2013-4550 - failed SSL handshake resource leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora Update for bip FEDORA-2013-21060
Check for the Version of bip OpenVAS Vulnerability Test Fedora Update for bip FEDORA-2013-21060 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora 18 : bip-0.8.9-1.fc18 (2013-21018)
Upstream v0.8.9 - CVE-2013-4550 - failed SSL handshake resource leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 20 : bip-0.8.9-1.fc20 (2013-21006)
Upstream v0.8.9 - CVE-2013-4550 - failed SSL handshake resource leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2012-4550
A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans EJB access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers JACC permissions from being...
JBoss Enterprise Application Platform安全绕过漏洞
CVE ID:CVE-2012-4550 JBOSS是一个基于J2EE的开放源代码的应用服务器。 当使用基于角色的授权用于Enterprise Java Beans EJB访问时，必须使用JACC权限来判断访问；但是存在一个安全漏洞没有调用配置的授权模块JACC, XACML等，使得JACC权限没有用来判断EJB访问，允许远程攻击者获得对EJB的未授权访问。 0 JBoss Enterprise Application Platform 即JBoss EAP或JBEAP 6.0.1之前版本 厂商解决方案 JBoss Enterprise Application Platform...
CVE-2012-4550
CVE-2012-4550 affects Red Hat/JBoss EAP 6.x up to 6.0.1 where, during EJB access, the configured authorization modules (JACC/XACML) were not invoked, preventing JACC permissions from being enforced and allowing remote access to an EJB. The issue is mitigated by updating to JBoss EAP 6.0.1 (RHSA-2...
Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update
JBoss Enterprise Application Platform 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...
CVE-2010-4550
CVE-2010-4550: IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document. This is corroborated across multiple connected records (NVD, Red Hat, CVE lists, PRION) with the same impact description. No exploitation details, v...
CVE-2009-4550
The vulnerability CVE-2009-4550 affects the Kunena Forum extension for Joomla! (com_kunena) in versions 1.5.3 and 1.5.4. The issue is a SQL injection in index.php via the func parameter, enabling remote attackers to execute arbitrary SQL commands. The exposure is practical given the remote, unaut...
CVE-2009-4550
creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9408...
CVE-2006-4550
CVE-2006-4550 describes a directory traversal vulnerability in CHXO Feedsplitter (2006-01-21) where remote attackers can read arbitrary XML files by manipulating the format parameter with a leading dot, bypassing a security check. The NVD entry lists the vulnerability with network access, low att...
CVE-2005-4550
The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...
