77 matches found
CVE-2009-1175
Cross-site scripting XSS vulnerability in apps/web/vsdiag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message...
CVE-2009-1175
Removed by vendor...
CVE-2009-1175: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in apps/web/vsdiag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message...
Apple iTunes Multiple Vulnerabilities
This host has Apple iTunes installed, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesmultvulnmar09.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Multiple Vulnerabilities Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Apple iTunes Multiple Vulnerabilities
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
Apple iTunes DoS
DoS with DAAP messages...
Apple iTunes DAAP Messages Handling Denial of Service Vulnerability
Apple iTunes DAAP Messages Handling Denial of Service Vulnerability 2009.Mar.13 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple iTunes Summary: ======== A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP message. Impact: ======...
Design/Logic Flaw
Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...
CVE-2009-0016
Apple iTunes for Windows before 8.1 is vulnerable to a Denial of Service caused by processing a DAAP message with a crafted Content-Length header, leading to an infinite loop/crash. The issue affects iTunes on Windows (pre-8.1); remediation is to upgrade to iTunes 8.1 or later. (Based on CVE-2009...
Apple iTunes信息泄露和拒绝服务漏洞
BUGTRAQ ID: 34094 CVECAN ID: CVE-2009-0016,CVE-2009-0143 Apple iTunes是一款媒体播放程序。 iTunes在处理数字音频访问协议（DAAP）消息时存在死循环，如果远程攻击者在发送的消息的DAAP头中包含了特制的Content-Length参数的话就会导致播放器崩溃。 iTunes的podcast功能中存在设计错误，订阅到恶意的podcast可能会向用户显示认证对话框，该对话框可诱骗用户向podcast服务器发送iTunes凭据。 Apple iTunes 8.0 厂商补丁： Apple -----...
CVE-2009-0016: Improper Input Validation
Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...
Apple iTunes < 8.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 8.1. It is, therefore, affected by multiple vulnerabilities : - A remote attacker can cause a denial of service by sending a maliciously crafted DAAP message. Note that this vulnerability only affects iTunes running on a Windows...
Apple iTunes < 8.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 8.1. Such versions may be affected by multiple vulnerabilities : - It may be possible to cause a denial of service by sending a maliciously crafted DAAP header to the application. CVE-2009-0016 - When subscribing to a...
GLSA-200712-18 : Multi-Threaded DAAP Daemon: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200712-18 Multi-Threaded DAAP Daemon: Multiple vulnerabilities nnp discovered multiple vulnerabilities in the XML-RPC handler in the file webserver.c. The wsaddarg function contains a format string vulnerability, as it does not...
Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others...
Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699
Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...
Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities
Exploit for unknown platform in category remote exploits ========================================================================= Firefly Media Server mt-daapd 2.4.1 / SVN 1699 Multiple Vulnerabilities ========================================================================= Luigi Auriemma...