EUVD-2005-4265

Malware in sbrugna...

X (Formerly Twitter): HTTP 401 response injection on "amp.twimg.com/amplify-web-player/prod/source.html" through "image_src" parameter

Overview The imagesrc parameter on amp.twimg.com accepts images from any arbitrary host, therefore, enabling attackers to supply image destinations that respond with a "HTTP 401 Unauthorized" response. Description HTTP 401 attacks occur when there is no whitelisting or proxying images and/or page...

CVE-2005-4270: Undefined Security Weakness

Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field...

oracle.web.listener.txt

Subject: Oracle Web Listener Date: Thu Nov 25 1999 12:45:35 Author: Mnemonix There is a problem seems to be a bug with Oracle Web Listener where a resource can be accessed when is shouldn't be able to be accessed: Consider the following setup: Access to http://host/ows-bin/owa/thenormal.app is...