CVE-2008-0046

The CVE-2008-0046 issue affects Apple Mac OS X 10.5.2 where the German translation of the Application Firewall setting “Set access for specific services and applications” can mislead users into thinking only listed services are restricted, potentially bypassing intended access controls. The subst...

CVE-2008-0046

The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applications" radio button that might cause the user to believe that the button is used to restrict access only to specific services and applications, which might...

jspwiki 2.4.1042.5.139 - Multiple Vulnerabilities

jspwiki 2.4.1042.5.139 - Multiple Vulnerabilities JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java,...

Debian: Security Advisory (DSA-803-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Jetty fails to properly process URLs that contain double / characters

Overview The Jetty web server contains a vulnerability that may allow an attacker to access private files or directories. Description Jetty is a web server that is implemented in Java. Jetty contains a vulnerability in the way it processes URLs with multiple "/" slash characters. See the Jetty...

tomcat multiple content-length header poisioning

Jakarta Tomcat 5.0.19 Coyote/1.1 and Tomcat 4.1.24 Coyote/1.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat t...

Apple Mac OS X防火墙误导性配置漏洞

BUGTRAQ ID: 26461 CVECAN ID: CVE-2007-4702 Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的应用防火墙设置存在误导性的功能描述，可能由于错误的安全认识导致信息泄露。 Mac OS X的应用防火墙的“阻断所有入站连接”设置允许任何以root用户权限（UID 0）运行的进程接收入站连接，也允许mDNSResponder接收连接，这可能导致非预期的暴露网络服务，远程攻击者可以破坏防火墙的安全策略执行某些网络攻击。 Apple Mac OS X 10.5 Apple MacOS X Server 10.5...

CVE-2007-4703

The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-4704

The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...

Security feature bypass

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions...

Design/Logic Flaw

The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...

CVE-2007-4702

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-4703

CVE-2007-4703 concerns the Apple Mac OS X 10.5 Application Firewall: a root (UID 0) process can still accept inbound connections despite the “Block incoming connections” setting, bypassing intended access restrictions. This is documented across multiple sources (NVD entry and distributed advisori...

CVE-2007-4704

The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...

CVE-2007-4703

The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-4704

The CVE-2007-4704 issue affects Mac OS X 10.5 Application Firewall: changes to firewall settings are not applied to processes started by launchd until those processes are restarted, potentially allowing bypassed access restrictions. Documented impact is a complete confidentiality, integrity, and ...

CVE-2007-4702

The CVE-2007-4702 issue affects Mac OS X 10.5 where the Application Firewall setting “Block all incoming connections” does not reliably block connections for root processes (UID 0) and for mDNSResponder, potentially allowing remote attackers or local root processes to bypass access restrictions. ...

Important: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix multiple security issues and a bug are now available for Red Hat Developer Suite 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages...

Cross site scripting

Cross-site scripting XSS vulnerability in the web application firewall in Cisco CallManager before 3.35sr3, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp aka the...

CVE-2007-2832

Cisco CallManager web interface (Cisco CallManager 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1) is affected by a cross-site scripting (XSS) vulnerability. The root cause is insufficient sanitization of input to the CCMAdmin/serverlist.asp (the search-form) and ...