4783 matches found
CVE-2011-2752
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n newline character, a different vulnerability than CVE-2010-4555...
CVE-2011-2752
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n newline character, a different vulnerability than CVE-2010-4555...
CVE-2011-2752
SquirrelMail 1.4.21 and earlier are affected by a CRLF injection (via a newline in input) that allows remote attackers to modify or add user preference values. This is documented as CVE-2011-2752. The issue arises from handling input in preference fields; John Doe? No vendor.
CVE-2011-2752
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n newline character, a different vulnerability than CVE-2010-4555...
CVE-2011-2752: Improper Control of Generation of Code
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n newline character, a different vulnerability than CVE-2010-4555...
Adobe ColdFusion Multiple Vulnerabilities (APSB11-04) (credentialed check)
The version of Adobe ColdFusion running on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in the ColdFusion administrator console. CVE-2011-0580 - Multiple CRLF injection vulnerabilities in various tags allow adding headers...
CVE-2011-2605
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...
Crlf injection
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...
CVE-2011-2605
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...
CVE-2011-2605
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...
CVE-2011-2605
CVE-2011-2605 is a CRLF-injection issue in Firefox/Thunderbird: nsCookieService::SetCookieStringInternal mishandles a newline in document.cookie, bypassing access restrictions. Affected: Mozilla Firefox before 3.6.18 and 4.x through 4.0.1; Thunderbird before 3.1.11. Outcome: potential cookie isol...
CVE-2011-2605: Improper Control of Generation of Code
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...
Xerver HTTP CRLF Injection Response Splitting (CVE-2009-4086)
This is a CRLF injection vulnerability in Xerver HTTP Server. Remote attackers could use this vulnerability to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL...
Mozilla Miscellaneous memory safety hazards (MFSA 2011-19)
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...
PT-2011-3954
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.18 Mozilla Firefox versions 4.x through 4.0.1 Thunderbird versions prior to 3.1.11 Description A CRLF injection issue exists in the nsCookieService::SetCookieStringInternal function, allowing remote...
Moderate: Red Hat Security Advisory: perl security and bug fix update
Updated perl packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
perl-CGI-Simple: - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting
CRLF injection vulnerability in the header function in 1 CGI.pm before 3.50 and 2 Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline...
Crlf injection
The getfilterlist function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service infinite loop via a malformed search filter...
FreeBSD Ports: bugzilla
The remote host is missing an update to the system as announced in the referenced advisory. VID c8c927e5-2891-11e0-8f26-00151735203a OpenVAS Vulnerability Test $ Description: Auto generated from VID c8c927e5-2891-11e0-8f26-00151735203a Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
