Unable to use HTTPS for login only

If you setup the urlrewrite.xml like so: noformat ^/s/.//download/images/^?. /images/$2 ^/s/.//^?. /$2 ^/login.action https https://localhost:8443/login.action ^/dologin.action https https://localhost:8443/dologin.action ^/. https /login.action. /dologin.action. /s/. http://localhost:8080/$...

[SECURITY] Fedora 12 Update: wireshark-1.2.5-3.fc12

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...

RHEL 4 : kernel (RHSA-2009:1671)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Adobe Reader and Acrobat 'newplayer()' JavaScript Method Remote Code Execution Vulnerability

Description Adobe Reader and Acrobat are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions. This issue affects Reader and Acrobat 9.2 and prior versions. Technologies...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

CVE-2009-4295

Sun Ray Server Software 4.0/4.1 on Sun Ray 1, 1g, 100, and 150 DTU devices does not generate a unique DSA private key for firmware, which can allow remote attackers to predict a key and decrypt sniffed network traffic. The CVE entry documents this vulnerability and its impact as described by mult...

Debian Security Advisory DSA 1942-1 (wireshark)

The remote host is missing an update to wireshark announced via advisory DSA 1942-1. OpenVAS Vulnerability Test $Id: deb19421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1942-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] Fedora 10 Update: wireshark-1.2.1-1.fc10

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

[SECURITY] Fedora 11 Update: wireshark-1.2.2-1.fc11

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Design/Logic Flaw

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

CVE-2009-3613

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

Microsoft Internet Explorer 'deflate' HTTP Content Encoding Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

openSUSE Security Update : wireshark (wireshark-1229)

Flaws in the AFS dissector allowed attackers to crash wireshark via specially crafted network traffic CVE-2009-2562. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-1229. The text...

Microsoft Office Web Components ActiveX Control Memory Allocation Code Execution Vulnerability

Description Microsoft Office Web Components OWC10 ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to visit a maliciously crafted webpage. Successfully exploiting this issue will allow the attacker to execute arbitrary co...

Basic Analysis and Security Engine Authentication Check

Basic Analysis and Security Engine BASE is installed on the remote system. It is possible to access the remote web application without any authentication. This allows anyone to not only browse anomalous network traffic but also obtain detailed information about the underlying OS, installed versio...

RedHat Security Advisory RHSA-2009:1100

The remote host is missing updates announced in advisory RHSA-2009:1100. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. A format string flaw was found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:135)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The selinuxippostrouteiptablescompat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compatnet is enabled, omits calls to avchasperm...

wireshark security update

CentOS Errata and Security Advisory CESA-2009:1100 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program fo...