SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 8657)

Mozilla Firefox has been updated to the 24.2.0 ESR security release. This is a major upgrade from the 17 ESR release branch. Security issues fixed : - Application Installation doorhanger persists on navigation. MFSA 2013-105. CVE-2013-5611 - Miscellaneous memory safety hazards rv:24.2. MFSA...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla updates 2013/12 (important)

This patch contains mozilla-nss 3.15.3.1 which includes a certstore update 1.95 to explicitely revoke AC DG Tresor SSL intermediate CA which was misused. Firefox 24.2esr Thunderbird 24.2 Seamonkey 2.23 These updates fix several security issues: CVE-2013-5611 Mozilla: Application Installation...

CVE-2013-6672

CVE-2013-6672: Firefox (Linux) and SeaMonkey are affected by a Linux clipboard information disclosure via middle-click paste. The initial entry specifies Firefox < 26.0 and SeaMonkey

SuSE 11.1 Security Update : openssh (SAT Patch Number 6672)

This collective security update of openssh fixes multiple security issues : - memory exhaustion in gssapi due to integer overflow. bnc756370, CVE-2011-5000 - forced command option information leak bnc744643, CVE-2012-0814 Additionally, the following bug has been fixed : - server-side delay upon...

CVE-2008-6672

Vertex4 SunAge 1.08.1 and earlier is affected. The vulnerability allows remote attackers to cause a DoS (runtime error) by sending a crafted join UDP packet to port 27960, likely tied to an invalid nickname command. Impact is partial availability degradation; no confidentiality/integrity impact s...

FreeBSD Ports: jetty

The remote host is missing an update to the system as announced in the referenced advisory. VID 0832ee18-cf77-11dc-8c6a-00304881ac9a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: jetty

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-6672

Mortbay Jetty versions 6.1.5 and 6.1.6 are vulnerable to a directory traversal flaw due to improper processing of URLs containing multiple forward slash (/) characters. This allows a remote unauthenticated attacker to bypass protection mechanisms and read the source of private files or view arbit...

Mort Bay Jetty URL Multiple Slash Character Information Disclosure

The remote instance of Mort Bay Jetty allows an attacker to view static content in WEB-INF and behind security constraints because of the approach it uses to compact URLs like '/foo///bar'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Jetty fails to properly process URLs that contain double / characters

Overview The Jetty web server contains a vulnerability that may allow an attacker to access private files or directories. Description Jetty is a web server that is implemented in Java. Jetty contains a vulnerability in the way it processes URLs with multiple "/" slash characters. See the Jetty...

CVE-2006-6672

CVE-2006-6672 describes multiple SQL injection vulnerabilities in the Burak Yylmaz Download Portal. The affected components are the application pages HABERLER.ASP and ASPKAT.ASP, with exploitable parameters (1) kid and (2) id. The impact stated is remote attackers can execute arbitrary SQL comman...