SSL renegotiation attacks detailed explanation-vulnerability warning-the black bar safety net

English good friends can see my English blog on the original. The attack uses the SSL Protocol renegotiation vulnerability, allowing an attacker to man in the middle attacks way in the communication of the initial portion of the insertion of any selected plaintext. The following assuming you on t...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1548 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Squid WCCP Message Parsing Denial Of Service (CVE-2005-0095)

Squid is a full featured, open source web proxy caching server. It supports the proxying of a variety of protocols including FTP, Gopher, and HTTP. It also supports the distribution of cached objects through the Web Cache Communication Protocol WCCP. A vulnerability exists in the way the Squid we...

SA-CONTRIB-2009-074- Webform - Multiple vulnerabilities

Cross-site scripting The Webform module enables the creation of custom forms for collecting data from users. The Webform module does not properly escape field labels in certain situations. A malicious user with permission to create webforms could attempt a cross-site scripting XSS attack when...

RHEL 5 : java-1.5.0-bea (RHSA-2008:0156)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0156 advisory. - Security Vulnerability in Java Runtime Environment With Applet Caching CVE-2007-5232 - Untrusted Application or Applet May Move or Copy...

[SECURITY] Fedora 10 Update: squid-3.0.STABLE18-1.fc10

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

[SECURITY] Fedora 11 Update: squid-3.0.STABLE18-1.fc11

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Mandrake Security Advisory MDVSA-2009:183 (apache-mod_security)

The remote host is missing an update to apache-modsecurity announced via advisory MDVSA-2009:183. OpenVAS Vulnerability Test $Id: mdksa2009183.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:183 apache-modsecurity Authors: Thomas Reinke Copyright:...

DSA-1843-1 squid3 - denial of service

Bulletin has no description...

Default credentials

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from 1 the HTTP referer header of external web sites that are visited from those links or 2 when...

CVE-2009-2374

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from 1 the HTTP referer header of external web sites that are visited from those links or 2 when...

CVE-2009-2374

Affected software: Drupal 5.x (before 5.19) and 6.x (before 6.13). Vulnerability: information disclosure of usernames and passwords in links on pages that contain a sortable table during failed login attempts. This can leak credentials via the HTTP referer header for external sites or through the...

CVE-2009-2070

Opera displays a cached certificate for a 1 4xx or 2 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a...

New attack class exploits intranet weaknesses

A security researcher has developed an interesting new class of attacks that exploit the problems caused by organizations using non-routable IP space on their internal networks, including one attack that compromises VPN users through the use of a persistent JavaScript backdoor. The attacks rely o...

Cumulative Security Update for Internet Explorer (969897)

This host is missing a critical security update according to Microsoft Bulletin MS09-019. OpenVAS Vulnerability Test $Id: secpodms09-019.nasl 6527 2017-07-05 05:56:34Z cfischer $ Cumulative Security Update for Internet Explorer 969897 Authors: Sharath S Updated By: Madhuri D on 2010-12-01 - To...

Cumulative Security Update for Internet Explorer (969897)

This host is missing a critical security update according to Microsoft Bulletin MS09-019. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Internet Explorer History Index Script Injection (MS09-019; CVE-2009-1140)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer caches data and incorrectly allows the cached content to be called, potentially...

Fedora Core 10 FEDORA-2009-4199 (memcached)

The remote host is missing an update to memcached announced via advisory FEDORA-2009-4199. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

[SECURITY] Fedora 10 Update: memcached-1.2.8-1.fc10

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load...

kernel security and bug fix update

2.6.9-78.0.22.0.1.EL - xen fix for hung JVM thread after GPF orabug 7916406 Chuck Anderson - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mt...