Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

多个Web浏览器SSL证书SubjectAltName验证漏洞

多个WEB浏览器在处理SSL证书验证方面存在缺陷。问题是由于不正确处理针对X.509证书的subjectAltName扩展。 成功利用此漏洞当非法证书使用在SSL HTTP连接时，可绕过安全警告进行钓鱼攻击。 下面的WEB浏览器受此漏洞影响： - Mozilla Firefox, 和Gecko渲染引擎的WEB浏览器。 Opera - Konqueror, 和基于KHTML渲染引擎的浏览器如Apple's Safari. Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Mozilla...

Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2

Hi On Tue, 2007-11-20 at 00:51 +0200, Kapetanakis Giannis wrote: ps. I've just discovered this: http://www.g-loaded.eu/2007/08/10/ssl-enabled-name-based-apache-virtual-hosts-with-modgnutls/ rfc3546 defines Server Name Indication SNI extention which is used by modgnutls for tls name based virtual...

[Full-disclosure] Certificate spoofing issue with Mozilla, Konqueror, Safari 2

Moin Mozilla based browsers Firefox, Netscape, ..., Konqueror and Safari 2 do not bind a user-approved webserver certificate to the originating domain name. This makes the user vulnerable to certificate spoofing by "subjectAltName:dNSName" extensions. I set up a demonstration at...

KDE Konqueror Cookie处理拒绝服务漏洞

Konqueror是一款多功能的浏器，允许浏览本地和网络文件系统和全功能的WWW浏览器。 Konqueror处理COOKIE存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当发送超大COOKIE，Konqueror处理时可导致崩溃，造成拒绝服务攻击。 KDE Konqueror 3.5.6 目前没有解决方案提供： http://www.konqueror.org/ ?php iniset"memorylimit","200M"; setcookie"hifox", strrepeat"A",19999999; ?...

CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

CVE-2007-6000

CVE-2007-6000 affects KDE Konqueror up to version 3.5.6, allowing remote attackers to trigger a denial of service (crash) by sending large HTTP cookie parameters. Affected software: Konqueror (KDE desktop) prior to 3.5.7(?) with reliance on cookie handling. Root cause details are not extensively ...

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service source: https://www.securityfocus.com/bid/26435/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle overly large cookies. An attacker may exploit this vulnerability to cause Konqueror to crash,...

Konqueror Remote Denial Of Service

Application: Konqueror = 3.5.6 Web Site: http://www.konqueror.org/ Platform: Unix Bug: Remote Denial of service ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Greets 5 Credits =========== 1 Introduction =========== "Konqueror is an Open Source we...

KDE Konqueror cookie buffer overflow

Buffer overflow on oversized cookie...

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service

source: https://www.securityfocus.com/bid/26435/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle overly large cookies. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in denial-of-service conditions. Konqueror 3.5...

[SECURITY] Fedora 7 Update: kdebase-3.5.8-3.fc7

Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...

Ubuntu 6.06 LTS / 6.10 / 7.04 : kdebase, kdelibs vulnerabilities (USN-502-1)

It was discovered that Konqueror could be tricked into displaying incorrect URLs. Remote attackers could exploit this to increase their chances of tricking a user into visiting a phishing URL, which could lead to credential theft. Note that Tenable Network Security has extracted the preceding...

Ubuntu 5.10 / 6.06 LTS / 6.10 : kdelibs vulnerabilities (USN-447-1)

It was discovered that Konqueror did not correctly handle iframes from JavaScript. If a user were tricked into visiting a malicious website, Konqueror could crash, resulting in a denial of service. CVE-2007-1308 A flaw was discovered in how Konqueror handled PASV FTP responses. If a user were...

Mandrake Linux Security Advisory : pcre (MDKSA-2007:212)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

Critical: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...