1820 matches found
MGASA-2016-0161 Updated subversion packages fix security vulnerabilities
Updated subversion packages fix security vulnerabilities: Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL library would permit a remote user to specify a realm string which is a prefix of the expected realm string and potentially...
Updated subversion packages fix security vulnerabilities
Updated subversion packages fix security vulnerabilities: Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL library would permit a remote user to specify a realm string which is a prefix of the expected realm string and potentially...
CVE-2016-2167: Improper Access Control
The canonicalizeusername function in svnserve/cyrusauth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repositor...
UBUNTU-CVE-2016-2167
The canonicalizeusername function in svnserve/cyrusauth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repositor...
CVE-2016-2167
The canonicalizeusername function in svnserve/cyrusauth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repositor...
Debian DSA-3561-1 : subversion - security update
Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-2167 Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL...
[SECURITY] [DSA 3561-1] subversion security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3561-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 29, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3561-1 (subversion - security update)
Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-2167 Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL...
DLA-448-1 subversion - security update
Bulletin has no description...
FreeBSD : subversion -- multiple vulnerabilities (c8174b63-0d3a-11e6-b06e-d43d7eed0ce2)
Subversion project reports : svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption. Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is ...
subversion -- multiple vulnerabilities
Subversion project reports: svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption. Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is a...
Miley Cyrus - Songs Quiz - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Miley Cyrus - Songs Quiz published at the 'play' market has multiple vulnerabilities...
Fedora 22 : cyrus-imapd-2.4.18-1.fc22 (2015-8d4b507cb0)
Update to 2.4.18, rhbz1267871 and rhbz1267878 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 21 : cyrus-imapd-2.4.18-1.fc21 (2015-d292a98f01)
Update to 2.4.18, rhbz1267871 and rhbz1267878 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 23 : cyrus-imapd-2.4.18-1.fc23 (2015-e7712d6c32)
Update to 2.4.18, rhbz1267871 and rhbz1267878 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Vulnerability of the Cyrus IMAP mail server and operating systems openSUSE and OpenSUSE Leap, allowing attackers to compromise the integrity and accessibility of protected information
The vulnerability of the indexurlfetch function imap/index.c in the Cyrus IMAP server and on the OpenSUSE and OpenSUSE Leap operating systems is caused by a numerical overflow issue. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected...
The vulnerability of the Cyrus IMAP mail server and the OpenSUSE and OpenSUSE Leap operating systems allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of the indexurlfetch function imap/index.c in the Cyrus IMAP server is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information by using the UrlFetch function and the...
Vulnerability of the Cyrus IMAP mail server and operating systems openSUSE and OpenSUSE Leap, allowing attackers to obtain confidential information or exert other effects
The vulnerability of the indexurlfetch function index.c in the Cyrus IMAP server is due to buffer overflow. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information or possibly cause other adverse effects...
Mageia: Security Advisory (MGASA-2016-0045)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...