MDVA-2010:172 : libneon0.27

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. Update: This advisory is obsoleted by http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:123 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2010:123)

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. This advisory obsoletes MDVA-2010:172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security Advisory...

Mandriva Update for libneon0.27 MDVSA-2010:123 (libneon0.27)

Check for the Version of libneon0.27 OpenVAS Vulnerability Test Mandriva Update for libneon0.27 MDVSA-2010:123 libneon0.27 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for libneon0.27 MDVA-2010:172 (libneon0.27)

Check for the Version of libneon0.27 OpenVAS Vulnerability Test Mandriva Update for libneon0.27 MDVA-2010:172 libneon0.27 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

libneon library / svn buffer overflow

Buffer overflow in NTLM authorization implementation...

CVE-2010-1413

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

Information disclosure

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2010-1413

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2010-1413

Removed by vendor...

CVE-2010-1413

CVE-2010-1413 affects WebKit in Apple Safari prior to 5.0 on Windows and macOS (and Safari before 4.1 on Mac OS X 10.4). The flaw allows NTLM credentials to be sent in cleartext under unspecified circumstances, enabling man-in-the-middle attackers to access sensitive information via unspecified v...

CVE-2010-1413

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

RealNetworks Helix Server NTLM Authentication Heap Overflow (CVE-2010-1317)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A heap-based buffer overflow vulnerability has been reported in RealNetworks Helix Server products. The flaw is due to an error when handling Base64-encoded NTLM Authentication data. A...

SuSE9 Security Update : epiphany (YOU Patch Number 12616)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. The following security issues are fixed : - Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be...

Squid - NTLM (Authenticated) Overflow (Metasploit)

$Id: squidntlmauthenticate.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RealNetworks Helix Server buffer overflow

Buffer overflow during NTLM authentication...

ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability

ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-079 April 28, 2010 -- CVE ID: CVE-2010-1317 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks Helix Server --...

Heap overflow

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...

CVE-2010-1317

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...

CVE-2010-1317

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...

CVE-2010-1317

RealNetworks Helix Server NTLM Authentication vulnerability (CVE-2010-1317) exists in the Base64 NTLM handling of the administrative web interface. The flaw arises when an invalid Base64 string is provided in the Authorization header, where a length derived from the failed decoding is used in a c...