Mozilla updates 2013/12 (important)

This patch contains mozilla-nss 3.15.3.1 which includes a certstore update 1.95 to explicitely revoke AC DG Tresor SSL intermediate CA which was misused. Firefox 24.2esr Thunderbird 24.2 Seamonkey 2.23 These updates fix several security issues: CVE-2013-5611 Mozilla: Application Installation...

CVE-2013-6672

CVE-2013-6672: Firefox (Linux) and SeaMonkey are affected by a Linux clipboard information disclosure via middle-click paste. The initial entry specifies Firefox < 26.0 and SeaMonkey

SuSE 11.1 Security Update : openssh (SAT Patch Number 6672)

This collective security update of openssh fixes multiple security issues : - memory exhaustion in gssapi due to integer overflow. bnc756370, CVE-2011-5000 - forced command option information leak bnc744643, CVE-2012-0814 Additionally, the following bug has been fixed : - server-side delay upon...

CVE-2008-6672

Vertex4 SunAge 1.08.1 and earlier is affected. The vulnerability allows remote attackers to cause a DoS (runtime error) by sending a crafted join UDP packet to port 27960, likely tied to an invalid nickname command. Impact is partial availability degradation; no confidentiality/integrity impact s...

FreeBSD Ports: jetty

The remote host is missing an update to the system as announced in the referenced advisory. VID 0832ee18-cf77-11dc-8c6a-00304881ac9a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: jetty

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-6672

Jetty 6.1.5 and 6.1.6 are affected by CVE-2007-6672, an information-disclosure vulnerability where remote attackers can read restricted files by crafting URIs containing multiple forward slashes (//). The root cause is improper processing of URLs with multiple ‘/’ characters, allowing access to r...

Mort Bay Jetty URL Multiple Slash Character Information Disclosure

The remote instance of Mort Bay Jetty allows an attacker to view static content in WEB-INF and behind security constraints because of the approach it uses to compact URLs like '/foo///bar'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Jetty fails to properly process URLs that contain double / characters

Overview The Jetty web server contains a vulnerability that may allow an attacker to access private files or directories. Description Jetty is a web server that is implemented in Java. Jetty contains a vulnerability in the way it processes URLs with multiple "/" slash characters. See the Jetty...

CVE-2006-6672

CVE-2006-6672 describes multiple SQL injection vulnerabilities in the Burak Yylmaz Download Portal. The affected components are the application pages HABERLER.ASP and ASPKAT.ASP, with exploitable parameters (1) kid and (2) id. The impact stated is remote attackers can execute arbitrary SQL comman...