CVE-2005-1109

The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via heap corruption...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

Debian DSA-713-1 : junkbuster - several vulnerabilities

Several bugs have been found in junkbuster, a HTTP proxy and filter. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1108 James Ranson discovered that an attacker can modify the referrer setting with a carefully crafted URL by accidentally...

[SECURITY] [DSA 713-1] New junkbuster packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 713-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 713-1] New junkbuster packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 713-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2005 http://www.debian.org/security/faq -...

DSA-713-1 junkbuster - several

Bulletin has no description...

CVE-2005-1108

JunkBuster 2.0.2-r2 in single-threaded mode is affected by CVE-2005-1108. The vulnerability allows remote attackers to overwrite the referrer field in HTTP requests by sending a crafted request, enabling partial integrity impact as described in the CVE entry. The linked OpenVAS entries and NVD re...

CVE-2005-1109

CVE-2005-1109 affects JunkBuster (before 2.0.2-r3): the URL filtering fails, allowing remote attackers to cause an application crash (DoS) and possibly execute arbitrary code via heap corruption. Remediation: upgrade to 2.0.2-r3 or later, per public descriptions. Exploitation details are not prov...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

CVE-2005-1109

The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via heap corruption...

CVE-2005-1109

The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via heap corruption...

CVE-2005-1108: Undefined Security Weakness

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

CVE-2005-1109: Undefined Security Weakness

The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via heap corruption...

JunkBuster filtering proxy multiple vulnerabilities

Heap corruption, content spoofing...

GLSA-200504-11 : JunkBuster: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-11 JunkBuster: Multiple vulnerabilities James Ranson reported a vulnerability when JunkBuster is configured to run in single-threaded mode, an attacker can modify the referrer setting by getting a victim to request a...

[ GLSA 200504-11 ] JunkBuster: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200504-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

JunkBuster: Multiple vulnerabilities

Background JunkBuster is a filtering HTTP proxy, designed to enhance privacy and remove unwanted content. Description James Ranson reported a vulnerability when JunkBuster is configured to run in single-threaded mode, an attacker can modify the referrer setting by getting a victim to request a...

[SECURITY] New versions of junkbuster fixes buffer overflows

We have received reports that junkbuster had a couple buffer overflow vulnerabilities. We fixed those in version 2.0-3.2. All later version are also not vulnerable. The patches were backported from 2.0.2 . We recommend you upgrade your junkbuster package immediately. wget url will fetch the file...

[SECURITY] New versions of junkbuster fixes buffer overflows

We have received reports that junkbuster had a couple buffer overflow vulnerabilities. We fixed those in version 2.0-3.2. All later version are also not vulnerable. The patches were backported from 2.0.2 . We recommend you upgrade your junkbuster package immediately. wget url will fetch the file...