CVE-2005-3339

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...

CVE-2005-3339

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...

CVE-2005-3339

CVE-2005-3339 affects MantisBT (Mantis) prior to version 0.19.3, where the User ID was cached longer than necessary. The connected OpenVAS and Debian/Gentoo advisories confirm that this CVE is part of a set of multiple vulnerabilities in Mantis and reference 0.19.3 as the fix version, but the pro...

CVE-2005-3339

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...

CVE-2005-1854

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server...

CVE-2005-1854: Undefined Security Weakness

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server...

apache -- http request smuggling

A Watchfire whitepaper reports an vulnerability in the Apache webserver. The vulnerability can be exploited by malicious people causing cross site scripting, web cache poisoining, session hijacking and most importantly the ability to bypass web application firewall protection. Exploiting this...

NetBSD Security Advisory 2005-001: Crypto leaks across HyperThreaded CPUs (i386, P4, HTT+SMP only)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2005-001 ================================= Topic: Crypto leaks across HyperThreaded CPUs i386, P4, HTT+SMP only Version: NetBSD-current: affected, i386 on P4 with HTT and SMP kernels NetBSD 2.0: affected, i386 on P4 with HTT a...

kernel -- ipfw packet matching errors with address tables

Problem Description The ipfw tables lookup code caches the result of the last query. The kernel may process multiple packets concurrently, performing several concurrent table lookups. Due to an insufficient locking, a cached result can become corrupted that could cause some addresses to be...

[SA15627] C-JDBC Exposure of Cached Results

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

C-JDBC clastered database access interface information leak

Vulnerability in caching mechanism allows to access cached data without access rights validation...

DSA-726-1 oops - format string vulnerability

Bulletin has no description...

CVE-2003-1183

The CVE concerns the WebCache component in Oracle Files within Oracle Collaboration Suite Release 1. versions 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 cache files despite Oracle Files cacheability rules, allowing local users to gain access. Affected product/area: WebCache in Oracle Files. Underlying i...

ASP.NET __VIEWSTATE crypto validation prone to replay attacks

Good morning, ASP.NET's extremely popular VIEWSTATE functionality provides an automatic, uniform method for storing current state of all webpage "controls" including form fields, database views, etc, so that user-entered data automagically persists and is populated across newly rendered HTML, and...

CVE-2005-0921

CVE-2005-0921 affects Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0. The vulnerability allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. The NVD metrics show a CVSS v2 base score of 4.6 (medium), with local at...

CVE-2005-0921

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...

CVE-2005-0921: Undefined Security Weakness

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...

CVE-2004-2681

PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session...

CVE-2004-0845

Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site...

CVE-2004-0845

CVE-2004-0845 concerns Internet Explorer (IE) versions 5.01, 5.5, and 6. The vulnerability arises from improper caching of SSL content, allowing an attacker to obtain information or spoof content by redirecting a user to a malicious site with the same host name as the target, causing cached conte...