CVE-2017-7143

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...

CVE-2017-7143

MODE C: CVE-2017-7143 affects macOS before 10.13 in the Captive Network Assistant, where a UI state/portal handling issue can cause cleartext passwords to be transmitted over the network in opportunistic scenarios. The connected Apple security content page HT208144 confirms the vulnerable compone...

CVE-2015-7143

CVE-2015-7143 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-7143

The mauthenticate function in modules/msasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...

CVE-2016-7143

CVE-2016-7143 affects the Charybdis IRC daemon (m_authenticate in modules/m_sasl.c) prior to version 3.5.3. The vulnerability lets remote attackers spoof certificate fingerprints and log in as another user via a crafted AUTHENTICATE parameter, with impact described as partial confidentiality/inte...

Debian DSA-3661-1 : charybdis - security update

It was discovered that incorrect SASL authentication in the Charybdis IRC server may lead to users impersonating other users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3661. The text...

[SECURITY] [DSA 3661-1] charybdis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3661-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2016 https://www.debian.org/security/faq -...

CVE-2013-7143

Open-Xchange AppSuite (OX App Suite) 7.4.1 and earlier is affected by CVE-2013-7143 due to HTML/JavaScript injection in the mail filter rule title, enabling stored XSS. The root cause is embedding script tags in the title field, which can be executed in a user’s context. Advisory indicates vulner...

CVE-2008-7143

phpBB 2.0.23 is affected. When a moderator/administrator closes a thread, the session ID can be exposed in a Referer header during a post that includes a URL to a remotely hosted image, enabling remote attackers to hijack the user session. The NVD entry lists CVSS v2 metrics: AV:N/AC:M/Au:N/C:P/I...

CVE-2006-7143

The CVE-2006-7143 entry describes a Cross-site Scripting (XSS) vulnerability in Call Center Software versions 0.93 and earlier, exploitable via the problem description field to inject arbitrary script/HTML. The provided sources confirm the affected software and the vulnerability class but do not ...